@lark-apaas/express-datapaas 0.0.3 → 1.0.0

package/dist/index.cjs

@@ -36,6 +36,92 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
+// src/runtime-patch.ts
+var import_node_async_hooks = require("async_hooks");
+var import_node_module = require("module");
+var import_node_url = require("url");
+var import_meta = {};
+var _require = (0, import_node_module.createRequire)(typeof __filename !== "undefined" ? __filename : (0, import_node_url.fileURLToPath)(import_meta.url));
+var asyncLocalStorage = new import_node_async_hooks.AsyncLocalStorage();
+function getAuthContextStore() {
+  return asyncLocalStorage.getStore();
+}
+__name(getAuthContextStore, "getAuthContextStore");
+function runWithAuthContext(store, fn) {
+  asyncLocalStorage.run(store, fn);
+}
+__name(runWithAuthContext, "runWithAuthContext");
+var _applied = false;
+function applyRuntimePatch() {
+  if (_applied) return;
+  const path = _require("node:path");
+  const drizzleEntry = _require.resolve("drizzle-orm");
+  const drizzleDir = drizzleEntry.slice(0, drizzleEntry.lastIndexOf(`${path.sep}drizzle-orm${path.sep}`) + `${path.sep}drizzle-orm`.length);
+  const session = _require(path.join(drizzleDir, "postgres-js", "session.cjs"));
+  const tracing = _require(path.join(drizzleDir, "tracing.cjs"));
+  const utils = _require(path.join(drizzleDir, "utils.cjs"));
+  const PreparedQuery = session.PostgresJsPreparedQuery;
+  if (!PreparedQuery) {
+    throw new Error("Cannot find PostgresJsPreparedQuery in drizzle-orm/postgres-js/session.cjs");
+  }
+  const originalExecute = PreparedQuery.prototype.execute;
+  const originalInit = PreparedQuery.prototype.constructor;
+  const patchedConstructor = /* @__PURE__ */ __name(function(...args) {
+    originalInit.apply(this, args);
+    const authContext = getAuthContextStore();
+    this.preSql = authContext?.preSql;
+    this.postSql = authContext?.postSql;
+  }, "patchedConstructor");
+  PreparedQuery.prototype.constructor = patchedConstructor;
+  PreparedQuery.prototype.execute = async function(params) {
+    const { preSql, postSql } = this;
+    if (!preSql && !postSql) {
+      return originalExecute.call(this, params);
+    }
+    const { fields, client, joinsNotNullableMap, customResultMapper } = this;
+    const tracer = tracing.tracer;
+    return tracer.startActiveSpan("drizzle.driver.execute.transactional", async (_span) => {
+      const execInContext = /* @__PURE__ */ __name(async (sql) => {
+        if (preSql) {
+          await tracer.startActiveSpan("drizzle.driver.execute.pre", () => sql.unsafe(preSql));
+        }
+        let result;
+        if (!fields && !customResultMapper) {
+          result = await tracer.startActiveSpan("drizzle.driver.execute.main", () => {
+            return this.queryWithCache(this.queryString, params, async () => {
+              return await sql.unsafe(this.queryString, params);
+            });
+          });
+        } else {
+          const rows = await tracer.startActiveSpan("drizzle.driver.execute.main", (innerSpan) => {
+            innerSpan?.setAttributes({
+              "drizzle.query.text": this.queryString,
+              "drizzle.query.params": JSON.stringify(params)
+            });
+            return this.queryWithCache(this.queryString, params, async () => {
+              return await sql.unsafe(this.queryString, params).values();
+            });
+          });
+          result = tracer.startActiveSpan("drizzle.mapResponse", () => {
+            return customResultMapper ? customResultMapper(rows) : rows.map((row) => utils.mapResultRow(fields, row, joinsNotNullableMap));
+          });
+        }
+        if (postSql) {
+          await tracer.startActiveSpan("drizzle.driver.execute.post", () => sql.unsafe(postSql));
+        }
+        return result;
+      }, "execInContext");
+      if (typeof client.begin === "function") {
+        return client.begin((tx) => execInContext(tx));
+      }
+      return execInContext(client);
+    });
+  };
+  _applied = true;
+}
+__name(applyRuntimePatch, "applyRuntimePatch");
+applyRuntimePatch();
+
 // src/create-database.ts
 var import_postgres_js = require("drizzle-orm/postgres-js");
 var import_postgres = __toESM(require("postgres"), 1);
@@ -99,21 +185,7 @@ function _getRoleSchema() {
   return _cachedRoleSchema;
 }
 __name(_getRoleSchema, "_getRoleSchema");
-function verifyDrizzlePatched() {
-  try {
-    const session2 = require("drizzle-orm/postgres-js");
-    const ok = session2 && typeof session2.getAuthContextStore === "function" && typeof session2.runWithAuthContext === "function";
-    if (!ok) {
-      throw new Error("drizzle-orm \u672A\u68C0\u6D4B\u5230\u8865\u4E01\u5BFC\u51FA\uFF1AgetAuthContextStore/runWithAuthContext");
-    }
-  } catch (err) {
-    const reason = err instanceof Error ? err.message : String(err);
-    throw new Error(`drizzle-orm \u8865\u4E01\u672A\u751F\u6548\u6216\u7248\u672C\u4E0D\u5339\u914D\uFF1A${reason}`);
-  }
-}
-__name(verifyDrizzlePatched, "verifyDrizzlePatched");
 function createDatabase(config) {
-  verifyDrizzlePatched();
   const { roleSchema, sslModeRequired } = parseRoleSchema(config.connectionString);
   _cachedRoleSchema = roleSchema;
   const resolvedSsl = config.ssl || (sslModeRequired ? "require" : false);
@@ -139,7 +211,6 @@ function createDatabase(config) {
 __name(createDatabase, "createDatabase");
 
 // src/create-rls-middleware.ts
-var session = __toESM(require("drizzle-orm/postgres-js"), 1);
 function createRlsMiddleware(options) {
   return /* @__PURE__ */ __name(function rlsMiddleware(req, _res, next) {
     const roleSchema = options?.roleSchema ?? _getRoleSchema();
@@ -157,7 +228,7 @@ function createRlsMiddleware(options) {
       roles ? `SET LOCAL app.role_ids = '${roles}'` : `SET LOCAL app.role_ids = ''`,
       userType ? `SET LOCAL app.user_type = '${userType}'` : `SET LOCAL app.user_type = ''`
     ].filter(Boolean).join(";");
-    session.runWithAuthContext({
+    runWithAuthContext({
       preSql: sqls
     }, () => {
       next();

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/create-database.ts","../src/utils.ts","../src/create-rls-middleware.ts"],"sourcesContent":["export { createDatabase } from './create-database';\nexport { createRlsMiddleware } from './create-rls-middleware';\nexport type { CreateDatabaseConfig, DatabaseInstance, UserContext } from './types';\nexport type { RlsMiddlewareOptions } from './create-rls-middleware';\nexport type { PostgresJsDatabase } from 'drizzle-orm/postgres-js';\n","import { drizzle } from 'drizzle-orm/postgres-js';\nimport postgres from 'postgres';\nimport { parseConnectionInfo, parseRoleSchema } from './utils';\nimport type { CreateDatabaseConfig, DatabaseInstance } from './types';\n\n// 模块级缓存，供 createRlsMiddleware 零参数调用时读取\nlet _cachedRoleSchema = '';\n\nexport function _getRoleSchema(): string {\n  return _cachedRoleSchema;\n}\n\nfunction verifyDrizzlePatched(): void {\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-var-requires\n    const session = require('drizzle-orm/postgres-js');\n    const ok =\n      session &&\n      typeof session.getAuthContextStore === 'function' &&\n      typeof session.runWithAuthContext === 'function';\n    if (!ok) {\n      throw new Error(\n        'drizzle-orm 未检测到补丁导出：getAuthContextStore/runWithAuthContext',\n      );\n    }\n  } catch (err) {\n    const reason = err instanceof Error ? err.message : String(err);\n    throw new Error(`drizzle-orm 补丁未生效或版本不匹配：${reason}`);\n  }\n}\n\nexport function createDatabase(config: CreateDatabaseConfig): DatabaseInstance {\n  verifyDrizzlePatched();\n\n  const { roleSchema, sslModeRequired } = parseRoleSchema(config.connectionString);\n  _cachedRoleSchema = roleSchema;\n\n  const resolvedSsl = config.ssl || (sslModeRequired ? 'require' : false);\n\n  const { connectionString, connectionConfig } = parseConnectionInfo(config.connectionString, {\n    maxConnections: config.maxConnections,\n    idleTimeout: config.idleTimeout,\n    connectionTimeout: config.connectionTimeout,\n    ssl: resolvedSsl,\n    logger: typeof config.logger === 'boolean' ? config.logger : false,\n  });\n\n  const sql = postgres(connectionString, connectionConfig);\n  const db = drizzle(sql, { schema: config.schema, logger: config.logger });\n\n  return {\n    db,\n    close: async () => {\n      await sql.end();\n    },\n  };\n}\n","import { type PostgresOptions } from './types';\n\ninterface ConnectionConfig {\n  maxConnections?: number;\n  idleTimeout?: number;\n  connectionTimeout?: number;\n  ssl?: PostgresOptions['ssl'];\n  logger?: boolean;\n}\n\nexport function parseConnectionInfo(connectionString: string, config?: ConnectionConfig) {\n  const { maxConnections, idleTimeout, connectionTimeout, ssl, logger } = config || {};\n\n  let parsedConfigFromUrl = null;\n  try {\n    parsedConfigFromUrl = new URL(connectionString);\n    const temp = new URL(connectionString);\n    temp.searchParams.delete('schema');\n    connectionString = temp.toString();\n  } catch (error) {\n    throw new Error('Failed to parse connection info');\n  }\n\n  const { username, password, hostname, port, pathname } = parsedConfigFromUrl;\n  const connectionConfig = {\n    username: decodeURIComponent(username),\n    password: decodeURIComponent(password),\n    host: [hostname] as unknown as string,\n    port: [parseInt(port) || 5432] as unknown as number,\n    pathname: decodeURIComponent(pathname),\n    max: maxConnections || 1,\n    idle_timeout: idleTimeout || 20,\n    connect_timeout: connectionTimeout || 10,\n    ssl,\n    onnotice: logger ? console.log : undefined,\n  };\n\n  return { connectionString, connectionConfig };\n}\n\nexport function parseRoleSchema(connectionString: string): { roleSchema: string; sslModeRequired: boolean } {\n  try {\n    const url = new URL(connectionString);\n    const roleSchema = url.searchParams.get('schema') || '';\n    const sslModeRequired = url.searchParams.get('sslmode') === 'require';\n    return { roleSchema, sslModeRequired };\n  } catch {\n    return { roleSchema: '', sslModeRequired: false };\n  }\n}\n","import { type Request, type Response, type NextFunction } from 'express';\nimport * as session from 'drizzle-orm/postgres-js';\nimport { _getRoleSchema } from './create-database';\nimport type { UserContext } from './types';\n\nexport interface RlsMiddlewareOptions {\n  roleSchema?: string;\n}\n\nexport function createRlsMiddleware(options?: RlsMiddlewareOptions) {\n  return function rlsMiddleware(req: Request, _res: Response, next: NextFunction) {\n    const roleSchema = options?.roleSchema ?? _getRoleSchema();\n    const userContext = (req as unknown as { userContext: UserContext }).userContext;\n\n    if (!userContext) {\n      return next();\n    }\n\n    const roles = (userContext.roles || []).join(',');\n    const userId = userContext.userId;\n    const isSystemAccount = userContext.isSystemAccount;\n    const userType = userContext.userType;\n\n    const sqls = [\n      userId\n        ? `SET LOCAL app.user_id = '${userId}'`\n        : `SET LOCAL app.user_id = ''`,\n      isSystemAccount\n        ? `SET LOCAL ROLE 'service_role_${roleSchema}'`\n        : userId\n          ? `SET LOCAL ROLE 'authenticated_${roleSchema}'`\n          : `SET LOCAL ROLE 'anon_${roleSchema}'`,\n      roles\n        ? `SET LOCAL app.role_ids = '${roles}'`\n        : `SET LOCAL app.role_ids = ''`,\n      userType\n        ? `SET LOCAL app.user_type = '${userType}'`\n        : `SET LOCAL app.user_type = ''`,\n    ]\n      .filter(Boolean)\n      .join(';');\n\n    (session as unknown as { runWithAuthContext: (store: { preSql: string }, fn: () => void) => void })\n      .runWithAuthContext({ preSql: sqls }, () => {\n        next();\n      });\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;ACAA,yBAAwB;AACxB,sBAAqB;;;ACSd,SAASA,oBAAoBC,kBAA0BC,QAAyB;AACrF,QAAM,EAAEC,gBAAgBC,aAAaC,mBAAmBC,KAAKC,OAAM,IAAKL,UAAU,CAAC;AAEnF,MAAIM,sBAAsB;AAC1B,MAAI;AACFA,0BAAsB,IAAIC,IAAIR,gBAAAA;AAC9B,UAAMS,OAAO,IAAID,IAAIR,gBAAAA;AACrBS,SAAKC,aAAaC,OAAO,QAAA;AACzBX,uBAAmBS,KAAKG,SAAQ;EAClC,SAASC,OAAO;AACd,UAAM,IAAIC,MAAM,iCAAA;EAClB;AAEA,QAAM,EAAEC,UAAUC,UAAUC,UAAUC,MAAMC,SAAQ,IAAKZ;AACzD,QAAMa,mBAAmB;IACvBL,UAAUM,mBAAmBN,QAAAA;IAC7BC,UAAUK,mBAAmBL,QAAAA;IAC7BM,MAAM;MAACL;;IACPC,MAAM;MAACK,SAASL,IAAAA,KAAS;;IACzBC,UAAUE,mBAAmBF,QAAAA;IAC7BK,KAAKtB,kBAAkB;IACvBuB,cAActB,eAAe;IAC7BuB,iBAAiBtB,qBAAqB;IACtCC;IACAsB,UAAUrB,SAASsB,QAAQC,MAAMC;EACnC;AAEA,SAAO;IAAE9B;IAAkBoB;EAAiB;AAC9C;AA5BgBrB;AA8BT,SAASgC,gBAAgB/B,kBAAwB;AACtD,MAAI;AACF,UAAMgC,MAAM,IAAIxB,IAAIR,gBAAAA;AACpB,UAAMiC,aAAaD,IAAItB,aAAawB,IAAI,QAAA,KAAa;AACrD,UAAMC,kBAAkBH,IAAItB,aAAawB,IAAI,SAAA,MAAe;AAC5D,WAAO;MAAED;MAAYE;IAAgB;EACvC,QAAQ;AACN,WAAO;MAAEF,YAAY;MAAIE,iBAAiB;IAAM;EAClD;AACF;AATgBJ;;;ADlChB,IAAIK,oBAAoB;AAEjB,SAASC,iBAAAA;AACd,SAAOD;AACT;AAFgBC;AAIhB,SAASC,uBAAAA;AACP,MAAI;AAEF,UAAMC,WAAUC,QAAQ,yBAAA;AACxB,UAAMC,KACJF,YACA,OAAOA,SAAQG,wBAAwB,cACvC,OAAOH,SAAQI,uBAAuB;AACxC,QAAI,CAACF,IAAI;AACP,YAAM,IAAIG,MACR,0GAAA;IAEJ;EACF,SAASC,KAAK;AACZ,UAAMC,SAASD,eAAeD,QAAQC,IAAIE,UAAUC,OAAOH,GAAAA;AAC3D,UAAM,IAAID,MAAM,uFAA2BE,MAAAA,EAAQ;EACrD;AACF;AAjBSR;AAmBF,SAASW,eAAeC,QAA4B;AACzDZ,uBAAAA;AAEA,QAAM,EAAEa,YAAYC,gBAAe,IAAKC,gBAAgBH,OAAOI,gBAAgB;AAC/ElB,sBAAoBe;AAEpB,QAAMI,cAAcL,OAAOM,QAAQJ,kBAAkB,YAAY;AAEjE,QAAM,EAAEE,kBAAkBG,iBAAgB,IAAKC,oBAAoBR,OAAOI,kBAAkB;IAC1FK,gBAAgBT,OAAOS;IACvBC,aAAaV,OAAOU;IACpBC,mBAAmBX,OAAOW;IAC1BL,KAAKD;IACLO,QAAQ,OAAOZ,OAAOY,WAAW,YAAYZ,OAAOY,SAAS;EAC/D,CAAA;AAEA,QAAMC,UAAMC,gBAAAA,SAASV,kBAAkBG,gBAAAA;AACvC,QAAMQ,SAAKC,4BAAQH,KAAK;IAAEI,QAAQjB,OAAOiB;IAAQL,QAAQZ,OAAOY;EAAO,CAAA;AAEvE,SAAO;IACLG;IACAG,OAAO,mCAAA;AACL,YAAML,IAAIM,IAAG;IACf,GAFO;EAGT;AACF;AAzBgBpB;;;AE9BhB,cAAyB;AAQlB,SAASqB,oBAAoBC,SAA8B;AAChE,SAAO,gCAASC,cAAcC,KAAcC,MAAgBC,MAAkB;AAC5E,UAAMC,aAAaL,SAASK,cAAcC,eAAAA;AAC1C,UAAMC,cAAeL,IAAgDK;AAErE,QAAI,CAACA,aAAa;AAChB,aAAOH,KAAAA;IACT;AAEA,UAAMI,SAASD,YAAYC,SAAS,CAAA,GAAIC,KAAK,GAAA;AAC7C,UAAMC,SAASH,YAAYG;AAC3B,UAAMC,kBAAkBJ,YAAYI;AACpC,UAAMC,WAAWL,YAAYK;AAE7B,UAAMC,OAAO;MACXH,SACI,4BAA4BA,MAAAA,MAC5B;MACJC,kBACI,gCAAgCN,UAAAA,MAChCK,SACE,iCAAiCL,UAAAA,MACjC,wBAAwBA,UAAAA;MAC9BG,QACI,6BAA6BA,KAAAA,MAC7B;MACJI,WACI,8BAA8BA,QAAAA,MAC9B;MAEHE,OAAOC,OAAAA,EACPN,KAAK,GAAA;AAEPO,IACEC,2BAAmB;MAAEC,QAAQL;IAAK,GAAG,MAAA;AACpCT,WAAAA;IACF,CAAA;EACJ,GApCO;AAqCT;AAtCgBL;","names":["parseConnectionInfo","connectionString","config","maxConnections","idleTimeout","connectionTimeout","ssl","logger","parsedConfigFromUrl","URL","temp","searchParams","delete","toString","error","Error","username","password","hostname","port","pathname","connectionConfig","decodeURIComponent","host","parseInt","max","idle_timeout","connect_timeout","onnotice","console","log","undefined","parseRoleSchema","url","roleSchema","get","sslModeRequired","_cachedRoleSchema","_getRoleSchema","verifyDrizzlePatched","session","require","ok","getAuthContextStore","runWithAuthContext","Error","err","reason","message","String","createDatabase","config","roleSchema","sslModeRequired","parseRoleSchema","connectionString","resolvedSsl","ssl","connectionConfig","parseConnectionInfo","maxConnections","idleTimeout","connectionTimeout","logger","sql","postgres","db","drizzle","schema","close","end","createRlsMiddleware","options","rlsMiddleware","req","_res","next","roleSchema","_getRoleSchema","userContext","roles","join","userId","isSystemAccount","userType","sqls","filter","Boolean","session","runWithAuthContext","preSql"]}
+{"version":3,"sources":["../src/index.ts","../src/runtime-patch.ts","../src/create-database.ts","../src/utils.ts","../src/create-rls-middleware.ts"],"sourcesContent":["import './runtime-patch';\nexport { createDatabase } from './create-database';\nexport { createRlsMiddleware } from './create-rls-middleware';\nexport type { CreateDatabaseConfig, DatabaseInstance, UserContext } from './types';\nexport type { RlsMiddlewareOptions } from './create-rls-middleware';\nexport type { PostgresJsDatabase } from 'drizzle-orm/postgres-js';\n","/* eslint-disable */\n/**\n * Runtime monkey-patch for drizzle-orm RLS support.\n *\n * Instead of patching files on disk (which breaks under pnpm v10's security policy),\n * this module patches drizzle-orm's PostgresJsPreparedQuery in memory at import time.\n *\n * Node.js CJS module cache guarantees that require('drizzle-orm/postgres-js/session.cjs')\n * returns the same object everywhere, so prototype mutations propagate to all consumers.\n */\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { createRequire } from 'node:module';\nimport { fileURLToPath } from 'node:url';\n\n// Create a require function that works in both ESM and CJS contexts\n// In CJS bundle (tsup output), import.meta.url may be undefined\nconst _require = createRequire(\n  typeof __filename !== 'undefined' ? __filename : fileURLToPath(import.meta.url)\n);\n\nexport interface RequestSessionContext {\n  preSql?: string;\n  postSql?: string;\n}\n\n// ── AsyncLocalStorage for per-request RLS context ──\nconst asyncLocalStorage = new AsyncLocalStorage<RequestSessionContext>();\n\nexport function getAuthContextStore(): RequestSessionContext | undefined {\n  return asyncLocalStorage.getStore();\n}\n\nexport function runWithAuthContext(store: RequestSessionContext, fn: () => void): void {\n  asyncLocalStorage.run(store, fn);\n}\n\n// ── Monkey-patch drizzle-orm ──\nlet _applied = false;\n\nfunction applyRuntimePatch(): void {\n  if (_applied) return;\n\n  // Resolve drizzle-orm root dir from its main entry, then require internal CJS files\n  // by absolute path (bypasses package.json exports restrictions that block deep imports)\n  const path = _require('node:path') as typeof import('node:path');\n  const drizzleEntry = _require.resolve('drizzle-orm');\n  const drizzleDir = drizzleEntry.slice(0, drizzleEntry.lastIndexOf(`${path.sep}drizzle-orm${path.sep}`) + `${path.sep}drizzle-orm`.length);\n  const session = _require(path.join(drizzleDir, 'postgres-js', 'session.cjs'));\n  const tracing = _require(path.join(drizzleDir, 'tracing.cjs'));\n  const utils = _require(path.join(drizzleDir, 'utils.cjs'));\n\n  const PreparedQuery = session.PostgresJsPreparedQuery;\n  if (!PreparedQuery) {\n    throw new Error('Cannot find PostgresJsPreparedQuery in drizzle-orm/postgres-js/session.cjs');\n  }\n\n  const originalExecute = PreparedQuery.prototype.execute;\n\n  // Patch constructor: capture preSql/postSql from AsyncLocalStorage at query creation time\n  const originalInit = PreparedQuery.prototype.constructor;\n  const patchedConstructor = function (this: any, ...args: any[]) {\n    originalInit.apply(this, args);\n    const authContext = getAuthContextStore();\n    this.preSql = authContext?.preSql;\n    this.postSql = authContext?.postSql;\n  };\n  PreparedQuery.prototype.constructor = patchedConstructor;\n\n  // Patch execute: if preSql/postSql exist, wrap in transaction\n  PreparedQuery.prototype.execute = async function (this: any, params?: unknown[]) {\n    const { preSql, postSql } = this;\n\n    if (!preSql && !postSql) {\n      // No RLS context, use original execute\n      return originalExecute.call(this, params);\n    }\n\n    // Execute with RLS context: preSql → main query → postSql in a transaction\n    const { fields, client, joinsNotNullableMap, customResultMapper } = this;\n    const tracer = tracing.tracer;\n\n    return tracer.startActiveSpan('drizzle.driver.execute.transactional', async (_span: any) => {\n      const execInContext = async (sql: any) => {\n        if (preSql) {\n          await tracer.startActiveSpan('drizzle.driver.execute.pre', () => sql.unsafe(preSql));\n        }\n\n        let result;\n        if (!fields && !customResultMapper) {\n          result = await tracer.startActiveSpan('drizzle.driver.execute.main', () => {\n            return this.queryWithCache(this.queryString, params, async () => {\n              return await sql.unsafe(this.queryString, params as any);\n            });\n          });\n        } else {\n          const rows = await tracer.startActiveSpan('drizzle.driver.execute.main', (innerSpan: any) => {\n            innerSpan?.setAttributes({\n              'drizzle.query.text': this.queryString,\n              'drizzle.query.params': JSON.stringify(params),\n            });\n            return this.queryWithCache(this.queryString, params, async () => {\n              return await sql.unsafe(this.queryString, params as any).values();\n            });\n          });\n          result = tracer.startActiveSpan('drizzle.mapResponse', () => {\n            return customResultMapper\n              ? customResultMapper(rows)\n              : rows.map((row: any) => utils.mapResultRow(fields, row, joinsNotNullableMap));\n          });\n        }\n\n        if (postSql) {\n          await tracer.startActiveSpan('drizzle.driver.execute.post', () => sql.unsafe(postSql));\n        }\n\n        return result;\n      };\n\n      // If client has begin(), we're not in a transaction yet — start one\n      if (typeof client.begin === 'function') {\n        return client.begin((tx: any) => execInContext(tx));\n      }\n      // Already in a transaction, execute directly\n      return execInContext(client);\n    });\n  };\n\n  _applied = true;\n}\n\n// Apply patch immediately on import\napplyRuntimePatch();\n","import { drizzle } from 'drizzle-orm/postgres-js';\nimport postgres from 'postgres';\nimport { parseConnectionInfo, parseRoleSchema } from './utils';\nimport type { CreateDatabaseConfig, DatabaseInstance } from './types';\n\n// 模块级缓存，供 createRlsMiddleware 零参数调用时读取\nlet _cachedRoleSchema = '';\n\nexport function _getRoleSchema(): string {\n  return _cachedRoleSchema;\n}\n\nexport function createDatabase(config: CreateDatabaseConfig): DatabaseInstance {\n\n  const { roleSchema, sslModeRequired } = parseRoleSchema(config.connectionString);\n  _cachedRoleSchema = roleSchema;\n\n  const resolvedSsl = config.ssl || (sslModeRequired ? 'require' : false);\n\n  const { connectionString, connectionConfig } = parseConnectionInfo(config.connectionString, {\n    maxConnections: config.maxConnections,\n    idleTimeout: config.idleTimeout,\n    connectionTimeout: config.connectionTimeout,\n    ssl: resolvedSsl,\n    logger: typeof config.logger === 'boolean' ? config.logger : false,\n  });\n\n  const sql = postgres(connectionString, connectionConfig);\n  const db = drizzle(sql, { schema: config.schema, logger: config.logger });\n\n  return {\n    db,\n    close: async () => {\n      await sql.end();\n    },\n  };\n}\n","import { type PostgresOptions } from './types';\n\ninterface ConnectionConfig {\n  maxConnections?: number;\n  idleTimeout?: number;\n  connectionTimeout?: number;\n  ssl?: PostgresOptions['ssl'];\n  logger?: boolean;\n}\n\nexport function parseConnectionInfo(connectionString: string, config?: ConnectionConfig) {\n  const { maxConnections, idleTimeout, connectionTimeout, ssl, logger } = config || {};\n\n  let parsedConfigFromUrl = null;\n  try {\n    parsedConfigFromUrl = new URL(connectionString);\n    const temp = new URL(connectionString);\n    temp.searchParams.delete('schema');\n    connectionString = temp.toString();\n  } catch (error) {\n    throw new Error('Failed to parse connection info');\n  }\n\n  const { username, password, hostname, port, pathname } = parsedConfigFromUrl;\n  const connectionConfig = {\n    username: decodeURIComponent(username),\n    password: decodeURIComponent(password),\n    host: [hostname] as unknown as string,\n    port: [parseInt(port) || 5432] as unknown as number,\n    pathname: decodeURIComponent(pathname),\n    max: maxConnections || 1,\n    idle_timeout: idleTimeout || 20,\n    connect_timeout: connectionTimeout || 10,\n    ssl,\n    onnotice: logger ? console.log : undefined,\n  };\n\n  return { connectionString, connectionConfig };\n}\n\nexport function parseRoleSchema(connectionString: string): { roleSchema: string; sslModeRequired: boolean } {\n  try {\n    const url = new URL(connectionString);\n    const roleSchema = url.searchParams.get('schema') || '';\n    const sslModeRequired = url.searchParams.get('sslmode') === 'require';\n    return { roleSchema, sslModeRequired };\n  } catch {\n    return { roleSchema: '', sslModeRequired: false };\n  }\n}\n","import { type Request, type Response, type NextFunction } from 'express';\nimport { runWithAuthContext } from './runtime-patch';\nimport { _getRoleSchema } from './create-database';\nimport type { UserContext } from './types';\n\nexport interface RlsMiddlewareOptions {\n  roleSchema?: string;\n}\n\nexport function createRlsMiddleware(options?: RlsMiddlewareOptions) {\n  return function rlsMiddleware(req: Request, _res: Response, next: NextFunction) {\n    const roleSchema = options?.roleSchema ?? _getRoleSchema();\n    const userContext = (req as unknown as { userContext: UserContext }).userContext;\n\n    if (!userContext) {\n      return next();\n    }\n\n    const roles = (userContext.roles || []).join(',');\n    const userId = userContext.userId;\n    const isSystemAccount = userContext.isSystemAccount;\n    const userType = userContext.userType;\n\n    const sqls = [\n      userId\n        ? `SET LOCAL app.user_id = '${userId}'`\n        : `SET LOCAL app.user_id = ''`,\n      isSystemAccount\n        ? `SET LOCAL ROLE 'service_role_${roleSchema}'`\n        : userId\n          ? `SET LOCAL ROLE 'authenticated_${roleSchema}'`\n          : `SET LOCAL ROLE 'anon_${roleSchema}'`,\n      roles\n        ? `SET LOCAL app.role_ids = '${roles}'`\n        : `SET LOCAL app.role_ids = ''`,\n      userType\n        ? `SET LOCAL app.user_type = '${userType}'`\n        : `SET LOCAL app.user_type = ''`,\n    ]\n      .filter(Boolean)\n      .join(';');\n\n    runWithAuthContext({ preSql: sqls }, () => {\n      next();\n    });\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;ACUA,8BAAkC;AAClC,yBAA8B;AAC9B,sBAA8B;AAZ9B;AAgBA,IAAMA,eAAWC,kCACf,OAAOC,eAAe,cAAcA,iBAAaC,+BAAc,YAAYC,GAAG,CAAA;AAShF,IAAMC,oBAAoB,IAAIC,0CAAAA;AAEvB,SAASC,sBAAAA;AACd,SAAOF,kBAAkBG,SAAQ;AACnC;AAFgBD;AAIT,SAASE,mBAAmBC,OAA8BC,IAAc;AAC7EN,oBAAkBO,IAAIF,OAAOC,EAAAA;AAC/B;AAFgBF;AAKhB,IAAII,WAAW;AAEf,SAASC,oBAAAA;AACP,MAAID,SAAU;AAId,QAAME,OAAOf,SAAS,WAAA;AACtB,QAAMgB,eAAehB,SAASiB,QAAQ,aAAA;AACtC,QAAMC,aAAaF,aAAaG,MAAM,GAAGH,aAAaI,YAAY,GAAGL,KAAKM,GAAG,cAAcN,KAAKM,GAAG,EAAE,IAAI,GAAGN,KAAKM,GAAG,cAAcC,MAAM;AACxI,QAAMC,UAAUvB,SAASe,KAAKS,KAAKN,YAAY,eAAe,aAAA,CAAA;AAC9D,QAAMO,UAAUzB,SAASe,KAAKS,KAAKN,YAAY,aAAA,CAAA;AAC/C,QAAMQ,QAAQ1B,SAASe,KAAKS,KAAKN,YAAY,WAAA,CAAA;AAE7C,QAAMS,gBAAgBJ,QAAQK;AAC9B,MAAI,CAACD,eAAe;AAClB,UAAM,IAAIE,MAAM,4EAAA;EAClB;AAEA,QAAMC,kBAAkBH,cAAcI,UAAUC;AAGhD,QAAMC,eAAeN,cAAcI,UAAU;AAC7C,QAAMG,qBAAqB,mCAAwBC,MAAW;AAC5DF,iBAAaG,MAAM,MAAMD,IAAAA;AACzB,UAAME,cAAc9B,oBAAAA;AACpB,SAAK+B,SAASD,aAAaC;AAC3B,SAAKC,UAAUF,aAAaE;EAC9B,GAL2B;AAM3BZ,gBAAcI,UAAU,cAAcG;AAGtCP,gBAAcI,UAAUC,UAAU,eAA2BQ,QAAkB;AAC7E,UAAM,EAAEF,QAAQC,QAAO,IAAK;AAE5B,QAAI,CAACD,UAAU,CAACC,SAAS;AAEvB,aAAOT,gBAAgBW,KAAK,MAAMD,MAAAA;IACpC;AAGA,UAAM,EAAEE,QAAQC,QAAQC,qBAAqBC,mBAAkB,IAAK;AACpE,UAAMC,SAASrB,QAAQqB;AAEvB,WAAOA,OAAOC,gBAAgB,wCAAwC,OAAOC,UAAAA;AAC3E,YAAMC,gBAAgB,8BAAOC,QAAAA;AAC3B,YAAIZ,QAAQ;AACV,gBAAMQ,OAAOC,gBAAgB,8BAA8B,MAAMG,IAAIC,OAAOb,MAAAA,CAAAA;QAC9E;AAEA,YAAIc;AACJ,YAAI,CAACV,UAAU,CAACG,oBAAoB;AAClCO,mBAAS,MAAMN,OAAOC,gBAAgB,+BAA+B,MAAA;AACnE,mBAAO,KAAKM,eAAe,KAAKC,aAAad,QAAQ,YAAA;AACnD,qBAAO,MAAMU,IAAIC,OAAO,KAAKG,aAAad,MAAAA;YAC5C,CAAA;UACF,CAAA;QACF,OAAO;AACL,gBAAMe,OAAO,MAAMT,OAAOC,gBAAgB,+BAA+B,CAACS,cAAAA;AACxEA,uBAAWC,cAAc;cACvB,sBAAsB,KAAKH;cAC3B,wBAAwBI,KAAKC,UAAUnB,MAAAA;YACzC,CAAA;AACA,mBAAO,KAAKa,eAAe,KAAKC,aAAad,QAAQ,YAAA;AACnD,qBAAO,MAAMU,IAAIC,OAAO,KAAKG,aAAad,MAAAA,EAAeoB,OAAM;YACjE,CAAA;UACF,CAAA;AACAR,mBAASN,OAAOC,gBAAgB,uBAAuB,MAAA;AACrD,mBAAOF,qBACHA,mBAAmBU,IAAAA,IACnBA,KAAKM,IAAI,CAACC,QAAapC,MAAMqC,aAAarB,QAAQoB,KAAKlB,mBAAAA,CAAAA;UAC7D,CAAA;QACF;AAEA,YAAIL,SAAS;AACX,gBAAMO,OAAOC,gBAAgB,+BAA+B,MAAMG,IAAIC,OAAOZ,OAAAA,CAAAA;QAC/E;AAEA,eAAOa;MACT,GAlCsB;AAqCtB,UAAI,OAAOT,OAAOqB,UAAU,YAAY;AACtC,eAAOrB,OAAOqB,MAAM,CAACC,OAAYhB,cAAcgB,EAAAA,CAAAA;MACjD;AAEA,aAAOhB,cAAcN,MAAAA;IACvB,CAAA;EACF;AAEA9B,aAAW;AACb;AAzFSC;AA4FTA,kBAAAA;;;ACnIA,yBAAwB;AACxB,sBAAqB;;;ACSd,SAASoD,oBAAoBC,kBAA0BC,QAAyB;AACrF,QAAM,EAAEC,gBAAgBC,aAAaC,mBAAmBC,KAAKC,OAAM,IAAKL,UAAU,CAAC;AAEnF,MAAIM,sBAAsB;AAC1B,MAAI;AACFA,0BAAsB,IAAIC,IAAIR,gBAAAA;AAC9B,UAAMS,OAAO,IAAID,IAAIR,gBAAAA;AACrBS,SAAKC,aAAaC,OAAO,QAAA;AACzBX,uBAAmBS,KAAKG,SAAQ;EAClC,SAASC,OAAO;AACd,UAAM,IAAIC,MAAM,iCAAA;EAClB;AAEA,QAAM,EAAEC,UAAUC,UAAUC,UAAUC,MAAMC,SAAQ,IAAKZ;AACzD,QAAMa,mBAAmB;IACvBL,UAAUM,mBAAmBN,QAAAA;IAC7BC,UAAUK,mBAAmBL,QAAAA;IAC7BM,MAAM;MAACL;;IACPC,MAAM;MAACK,SAASL,IAAAA,KAAS;;IACzBC,UAAUE,mBAAmBF,QAAAA;IAC7BK,KAAKtB,kBAAkB;IACvBuB,cAActB,eAAe;IAC7BuB,iBAAiBtB,qBAAqB;IACtCC;IACAsB,UAAUrB,SAASsB,QAAQC,MAAMC;EACnC;AAEA,SAAO;IAAE9B;IAAkBoB;EAAiB;AAC9C;AA5BgBrB;AA8BT,SAASgC,gBAAgB/B,kBAAwB;AACtD,MAAI;AACF,UAAMgC,MAAM,IAAIxB,IAAIR,gBAAAA;AACpB,UAAMiC,aAAaD,IAAItB,aAAawB,IAAI,QAAA,KAAa;AACrD,UAAMC,kBAAkBH,IAAItB,aAAawB,IAAI,SAAA,MAAe;AAC5D,WAAO;MAAED;MAAYE;IAAgB;EACvC,QAAQ;AACN,WAAO;MAAEF,YAAY;MAAIE,iBAAiB;IAAM;EAClD;AACF;AATgBJ;;;ADlChB,IAAIK,oBAAoB;AAEjB,SAASC,iBAAAA;AACd,SAAOD;AACT;AAFgBC;AAIT,SAASC,eAAeC,QAA4B;AAEzD,QAAM,EAAEC,YAAYC,gBAAe,IAAKC,gBAAgBH,OAAOI,gBAAgB;AAC/EP,sBAAoBI;AAEpB,QAAMI,cAAcL,OAAOM,QAAQJ,kBAAkB,YAAY;AAEjE,QAAM,EAAEE,kBAAkBG,iBAAgB,IAAKC,oBAAoBR,OAAOI,kBAAkB;IAC1FK,gBAAgBT,OAAOS;IACvBC,aAAaV,OAAOU;IACpBC,mBAAmBX,OAAOW;IAC1BL,KAAKD;IACLO,QAAQ,OAAOZ,OAAOY,WAAW,YAAYZ,OAAOY,SAAS;EAC/D,CAAA;AAEA,QAAMC,UAAMC,gBAAAA,SAASV,kBAAkBG,gBAAAA;AACvC,QAAMQ,SAAKC,4BAAQH,KAAK;IAAEI,QAAQjB,OAAOiB;IAAQL,QAAQZ,OAAOY;EAAO,CAAA;AAEvE,SAAO;IACLG;IACAG,OAAO,mCAAA;AACL,YAAML,IAAIM,IAAG;IACf,GAFO;EAGT;AACF;AAxBgBpB;;;AEHT,SAASqB,oBAAoBC,SAA8B;AAChE,SAAO,gCAASC,cAAcC,KAAcC,MAAgBC,MAAkB;AAC5E,UAAMC,aAAaL,SAASK,cAAcC,eAAAA;AAC1C,UAAMC,cAAeL,IAAgDK;AAErE,QAAI,CAACA,aAAa;AAChB,aAAOH,KAAAA;IACT;AAEA,UAAMI,SAASD,YAAYC,SAAS,CAAA,GAAIC,KAAK,GAAA;AAC7C,UAAMC,SAASH,YAAYG;AAC3B,UAAMC,kBAAkBJ,YAAYI;AACpC,UAAMC,WAAWL,YAAYK;AAE7B,UAAMC,OAAO;MACXH,SACI,4BAA4BA,MAAAA,MAC5B;MACJC,kBACI,gCAAgCN,UAAAA,MAChCK,SACE,iCAAiCL,UAAAA,MACjC,wBAAwBA,UAAAA;MAC9BG,QACI,6BAA6BA,KAAAA,MAC7B;MACJI,WACI,8BAA8BA,QAAAA,MAC9B;MAEHE,OAAOC,OAAAA,EACPN,KAAK,GAAA;AAERO,uBAAmB;MAAEC,QAAQJ;IAAK,GAAG,MAAA;AACnCT,WAAAA;IACF,CAAA;EACF,GAnCO;AAoCT;AArCgBL;","names":["_require","createRequire","__filename","fileURLToPath","url","asyncLocalStorage","AsyncLocalStorage","getAuthContextStore","getStore","runWithAuthContext","store","fn","run","_applied","applyRuntimePatch","path","drizzleEntry","resolve","drizzleDir","slice","lastIndexOf","sep","length","session","join","tracing","utils","PreparedQuery","PostgresJsPreparedQuery","Error","originalExecute","prototype","execute","originalInit","patchedConstructor","args","apply","authContext","preSql","postSql","params","call","fields","client","joinsNotNullableMap","customResultMapper","tracer","startActiveSpan","_span","execInContext","sql","unsafe","result","queryWithCache","queryString","rows","innerSpan","setAttributes","JSON","stringify","values","map","row","mapResultRow","begin","tx","parseConnectionInfo","connectionString","config","maxConnections","idleTimeout","connectionTimeout","ssl","logger","parsedConfigFromUrl","URL","temp","searchParams","delete","toString","error","Error","username","password","hostname","port","pathname","connectionConfig","decodeURIComponent","host","parseInt","max","idle_timeout","connect_timeout","onnotice","console","log","undefined","parseRoleSchema","url","roleSchema","get","sslModeRequired","_cachedRoleSchema","_getRoleSchema","createDatabase","config","roleSchema","sslModeRequired","parseRoleSchema","connectionString","resolvedSsl","ssl","connectionConfig","parseConnectionInfo","maxConnections","idleTimeout","connectionTimeout","logger","sql","postgres","db","drizzle","schema","close","end","createRlsMiddleware","options","rlsMiddleware","req","_res","next","roleSchema","_getRoleSchema","userContext","roles","join","userId","isSystemAccount","userType","sqls","filter","Boolean","runWithAuthContext","preSql"]}

package/dist/index.js

@@ -1,11 +1,90 @@
 var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
+
+// src/runtime-patch.ts
+import { AsyncLocalStorage } from "async_hooks";
+import { createRequire } from "module";
+import { fileURLToPath } from "url";
+var _require = createRequire(typeof __filename !== "undefined" ? __filename : fileURLToPath(import.meta.url));
+var asyncLocalStorage = new AsyncLocalStorage();
+function getAuthContextStore() {
+  return asyncLocalStorage.getStore();
+}
+__name(getAuthContextStore, "getAuthContextStore");
+function runWithAuthContext(store, fn) {
+  asyncLocalStorage.run(store, fn);
+}
+__name(runWithAuthContext, "runWithAuthContext");
+var _applied = false;
+function applyRuntimePatch() {
+  if (_applied) return;
+  const path = _require("node:path");
+  const drizzleEntry = _require.resolve("drizzle-orm");
+  const drizzleDir = drizzleEntry.slice(0, drizzleEntry.lastIndexOf(`${path.sep}drizzle-orm${path.sep}`) + `${path.sep}drizzle-orm`.length);
+  const session = _require(path.join(drizzleDir, "postgres-js", "session.cjs"));
+  const tracing = _require(path.join(drizzleDir, "tracing.cjs"));
+  const utils = _require(path.join(drizzleDir, "utils.cjs"));
+  const PreparedQuery = session.PostgresJsPreparedQuery;
+  if (!PreparedQuery) {
+    throw new Error("Cannot find PostgresJsPreparedQuery in drizzle-orm/postgres-js/session.cjs");
+  }
+  const originalExecute = PreparedQuery.prototype.execute;
+  const originalInit = PreparedQuery.prototype.constructor;
+  const patchedConstructor = /* @__PURE__ */ __name(function(...args) {
+    originalInit.apply(this, args);
+    const authContext = getAuthContextStore();
+    this.preSql = authContext?.preSql;
+    this.postSql = authContext?.postSql;
+  }, "patchedConstructor");
+  PreparedQuery.prototype.constructor = patchedConstructor;
+  PreparedQuery.prototype.execute = async function(params) {
+    const { preSql, postSql } = this;
+    if (!preSql && !postSql) {
+      return originalExecute.call(this, params);
+    }
+    const { fields, client, joinsNotNullableMap, customResultMapper } = this;
+    const tracer = tracing.tracer;
+    return tracer.startActiveSpan("drizzle.driver.execute.transactional", async (_span) => {
+      const execInContext = /* @__PURE__ */ __name(async (sql) => {
+        if (preSql) {
+          await tracer.startActiveSpan("drizzle.driver.execute.pre", () => sql.unsafe(preSql));
+        }
+        let result;
+        if (!fields && !customResultMapper) {
+          result = await tracer.startActiveSpan("drizzle.driver.execute.main", () => {
+            return this.queryWithCache(this.queryString, params, async () => {
+              return await sql.unsafe(this.queryString, params);
+            });
+          });
+        } else {
+          const rows = await tracer.startActiveSpan("drizzle.driver.execute.main", (innerSpan) => {
+            innerSpan?.setAttributes({
+              "drizzle.query.text": this.queryString,
+              "drizzle.query.params": JSON.stringify(params)
+            });
+            return this.queryWithCache(this.queryString, params, async () => {
+              return await sql.unsafe(this.queryString, params).values();
+            });
+          });
+          result = tracer.startActiveSpan("drizzle.mapResponse", () => {
+            return customResultMapper ? customResultMapper(rows) : rows.map((row) => utils.mapResultRow(fields, row, joinsNotNullableMap));
+          });
+        }
+        if (postSql) {
+          await tracer.startActiveSpan("drizzle.driver.execute.post", () => sql.unsafe(postSql));
+        }
+        return result;
+      }, "execInContext");
+      if (typeof client.begin === "function") {
+        return client.begin((tx) => execInContext(tx));
+      }
+      return execInContext(client);
+    });
+  };
+  _applied = true;
+}
+__name(applyRuntimePatch, "applyRuntimePatch");
+applyRuntimePatch();
 
 // src/create-database.ts
 import { drizzle } from "drizzle-orm/postgres-js";
@@ -70,21 +149,7 @@ function _getRoleSchema() {
   return _cachedRoleSchema;
 }
 __name(_getRoleSchema, "_getRoleSchema");
-function verifyDrizzlePatched() {
-  try {
-    const session2 = __require("drizzle-orm/postgres-js");
-    const ok = session2 && typeof session2.getAuthContextStore === "function" && typeof session2.runWithAuthContext === "function";
-    if (!ok) {
-      throw new Error("drizzle-orm \u672A\u68C0\u6D4B\u5230\u8865\u4E01\u5BFC\u51FA\uFF1AgetAuthContextStore/runWithAuthContext");
-    }
-  } catch (err) {
-    const reason = err instanceof Error ? err.message : String(err);
-    throw new Error(`drizzle-orm \u8865\u4E01\u672A\u751F\u6548\u6216\u7248\u672C\u4E0D\u5339\u914D\uFF1A${reason}`);
-  }
-}
-__name(verifyDrizzlePatched, "verifyDrizzlePatched");
 function createDatabase(config) {
-  verifyDrizzlePatched();
   const { roleSchema, sslModeRequired } = parseRoleSchema(config.connectionString);
   _cachedRoleSchema = roleSchema;
   const resolvedSsl = config.ssl || (sslModeRequired ? "require" : false);
@@ -110,7 +175,6 @@ function createDatabase(config) {
 __name(createDatabase, "createDatabase");
 
 // src/create-rls-middleware.ts
-import * as session from "drizzle-orm/postgres-js";
 function createRlsMiddleware(options) {
   return /* @__PURE__ */ __name(function rlsMiddleware(req, _res, next) {
     const roleSchema = options?.roleSchema ?? _getRoleSchema();
@@ -128,7 +192,7 @@ function createRlsMiddleware(options) {
       roles ? `SET LOCAL app.role_ids = '${roles}'` : `SET LOCAL app.role_ids = ''`,
       userType ? `SET LOCAL app.user_type = '${userType}'` : `SET LOCAL app.user_type = ''`
     ].filter(Boolean).join(";");
-    session.runWithAuthContext({
+    runWithAuthContext({
       preSql: sqls
     }, () => {
       next();

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/create-database.ts","../src/utils.ts","../src/create-rls-middleware.ts"],"sourcesContent":["import { drizzle } from 'drizzle-orm/postgres-js';\nimport postgres from 'postgres';\nimport { parseConnectionInfo, parseRoleSchema } from './utils';\nimport type { CreateDatabaseConfig, DatabaseInstance } from './types';\n\n// 模块级缓存，供 createRlsMiddleware 零参数调用时读取\nlet _cachedRoleSchema = '';\n\nexport function _getRoleSchema(): string {\n  return _cachedRoleSchema;\n}\n\nfunction verifyDrizzlePatched(): void {\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-var-requires\n    const session = require('drizzle-orm/postgres-js');\n    const ok =\n      session &&\n      typeof session.getAuthContextStore === 'function' &&\n      typeof session.runWithAuthContext === 'function';\n    if (!ok) {\n      throw new Error(\n        'drizzle-orm 未检测到补丁导出：getAuthContextStore/runWithAuthContext',\n      );\n    }\n  } catch (err) {\n    const reason = err instanceof Error ? err.message : String(err);\n    throw new Error(`drizzle-orm 补丁未生效或版本不匹配：${reason}`);\n  }\n}\n\nexport function createDatabase(config: CreateDatabaseConfig): DatabaseInstance {\n  verifyDrizzlePatched();\n\n  const { roleSchema, sslModeRequired } = parseRoleSchema(config.connectionString);\n  _cachedRoleSchema = roleSchema;\n\n  const resolvedSsl = config.ssl || (sslModeRequired ? 'require' : false);\n\n  const { connectionString, connectionConfig } = parseConnectionInfo(config.connectionString, {\n    maxConnections: config.maxConnections,\n    idleTimeout: config.idleTimeout,\n    connectionTimeout: config.connectionTimeout,\n    ssl: resolvedSsl,\n    logger: typeof config.logger === 'boolean' ? config.logger : false,\n  });\n\n  const sql = postgres(connectionString, connectionConfig);\n  const db = drizzle(sql, { schema: config.schema, logger: config.logger });\n\n  return {\n    db,\n    close: async () => {\n      await sql.end();\n    },\n  };\n}\n","import { type PostgresOptions } from './types';\n\ninterface ConnectionConfig {\n  maxConnections?: number;\n  idleTimeout?: number;\n  connectionTimeout?: number;\n  ssl?: PostgresOptions['ssl'];\n  logger?: boolean;\n}\n\nexport function parseConnectionInfo(connectionString: string, config?: ConnectionConfig) {\n  const { maxConnections, idleTimeout, connectionTimeout, ssl, logger } = config || {};\n\n  let parsedConfigFromUrl = null;\n  try {\n    parsedConfigFromUrl = new URL(connectionString);\n    const temp = new URL(connectionString);\n    temp.searchParams.delete('schema');\n    connectionString = temp.toString();\n  } catch (error) {\n    throw new Error('Failed to parse connection info');\n  }\n\n  const { username, password, hostname, port, pathname } = parsedConfigFromUrl;\n  const connectionConfig = {\n    username: decodeURIComponent(username),\n    password: decodeURIComponent(password),\n    host: [hostname] as unknown as string,\n    port: [parseInt(port) || 5432] as unknown as number,\n    pathname: decodeURIComponent(pathname),\n    max: maxConnections || 1,\n    idle_timeout: idleTimeout || 20,\n    connect_timeout: connectionTimeout || 10,\n    ssl,\n    onnotice: logger ? console.log : undefined,\n  };\n\n  return { connectionString, connectionConfig };\n}\n\nexport function parseRoleSchema(connectionString: string): { roleSchema: string; sslModeRequired: boolean } {\n  try {\n    const url = new URL(connectionString);\n    const roleSchema = url.searchParams.get('schema') || '';\n    const sslModeRequired = url.searchParams.get('sslmode') === 'require';\n    return { roleSchema, sslModeRequired };\n  } catch {\n    return { roleSchema: '', sslModeRequired: false };\n  }\n}\n","import { type Request, type Response, type NextFunction } from 'express';\nimport * as session from 'drizzle-orm/postgres-js';\nimport { _getRoleSchema } from './create-database';\nimport type { UserContext } from './types';\n\nexport interface RlsMiddlewareOptions {\n  roleSchema?: string;\n}\n\nexport function createRlsMiddleware(options?: RlsMiddlewareOptions) {\n  return function rlsMiddleware(req: Request, _res: Response, next: NextFunction) {\n    const roleSchema = options?.roleSchema ?? _getRoleSchema();\n    const userContext = (req as unknown as { userContext: UserContext }).userContext;\n\n    if (!userContext) {\n      return next();\n    }\n\n    const roles = (userContext.roles || []).join(',');\n    const userId = userContext.userId;\n    const isSystemAccount = userContext.isSystemAccount;\n    const userType = userContext.userType;\n\n    const sqls = [\n      userId\n        ? `SET LOCAL app.user_id = '${userId}'`\n        : `SET LOCAL app.user_id = ''`,\n      isSystemAccount\n        ? `SET LOCAL ROLE 'service_role_${roleSchema}'`\n        : userId\n          ? `SET LOCAL ROLE 'authenticated_${roleSchema}'`\n          : `SET LOCAL ROLE 'anon_${roleSchema}'`,\n      roles\n        ? `SET LOCAL app.role_ids = '${roles}'`\n        : `SET LOCAL app.role_ids = ''`,\n      userType\n        ? `SET LOCAL app.user_type = '${userType}'`\n        : `SET LOCAL app.user_type = ''`,\n    ]\n      .filter(Boolean)\n      .join(';');\n\n    (session as unknown as { runWithAuthContext: (store: { preSql: string }, fn: () => void) => void })\n      .runWithAuthContext({ preSql: sqls }, () => {\n        next();\n      });\n  };\n}\n"],"mappings":";;;;;;;;;;AAAA,SAASA,eAAe;AACxB,OAAOC,cAAc;;;ACSd,SAASC,oBAAoBC,kBAA0BC,QAAyB;AACrF,QAAM,EAAEC,gBAAgBC,aAAaC,mBAAmBC,KAAKC,OAAM,IAAKL,UAAU,CAAC;AAEnF,MAAIM,sBAAsB;AAC1B,MAAI;AACFA,0BAAsB,IAAIC,IAAIR,gBAAAA;AAC9B,UAAMS,OAAO,IAAID,IAAIR,gBAAAA;AACrBS,SAAKC,aAAaC,OAAO,QAAA;AACzBX,uBAAmBS,KAAKG,SAAQ;EAClC,SAASC,OAAO;AACd,UAAM,IAAIC,MAAM,iCAAA;EAClB;AAEA,QAAM,EAAEC,UAAUC,UAAUC,UAAUC,MAAMC,SAAQ,IAAKZ;AACzD,QAAMa,mBAAmB;IACvBL,UAAUM,mBAAmBN,QAAAA;IAC7BC,UAAUK,mBAAmBL,QAAAA;IAC7BM,MAAM;MAACL;;IACPC,MAAM;MAACK,SAASL,IAAAA,KAAS;;IACzBC,UAAUE,mBAAmBF,QAAAA;IAC7BK,KAAKtB,kBAAkB;IACvBuB,cAActB,eAAe;IAC7BuB,iBAAiBtB,qBAAqB;IACtCC;IACAsB,UAAUrB,SAASsB,QAAQC,MAAMC;EACnC;AAEA,SAAO;IAAE9B;IAAkBoB;EAAiB;AAC9C;AA5BgBrB;AA8BT,SAASgC,gBAAgB/B,kBAAwB;AACtD,MAAI;AACF,UAAMgC,MAAM,IAAIxB,IAAIR,gBAAAA;AACpB,UAAMiC,aAAaD,IAAItB,aAAawB,IAAI,QAAA,KAAa;AACrD,UAAMC,kBAAkBH,IAAItB,aAAawB,IAAI,SAAA,MAAe;AAC5D,WAAO;MAAED;MAAYE;IAAgB;EACvC,QAAQ;AACN,WAAO;MAAEF,YAAY;MAAIE,iBAAiB;IAAM;EAClD;AACF;AATgBJ;;;ADlChB,IAAIK,oBAAoB;AAEjB,SAASC,iBAAAA;AACd,SAAOD;AACT;AAFgBC;AAIhB,SAASC,uBAAAA;AACP,MAAI;AAEF,UAAMC,WAAUC,UAAQ,yBAAA;AACxB,UAAMC,KACJF,YACA,OAAOA,SAAQG,wBAAwB,cACvC,OAAOH,SAAQI,uBAAuB;AACxC,QAAI,CAACF,IAAI;AACP,YAAM,IAAIG,MACR,0GAAA;IAEJ;EACF,SAASC,KAAK;AACZ,UAAMC,SAASD,eAAeD,QAAQC,IAAIE,UAAUC,OAAOH,GAAAA;AAC3D,UAAM,IAAID,MAAM,uFAA2BE,MAAAA,EAAQ;EACrD;AACF;AAjBSR;AAmBF,SAASW,eAAeC,QAA4B;AACzDZ,uBAAAA;AAEA,QAAM,EAAEa,YAAYC,gBAAe,IAAKC,gBAAgBH,OAAOI,gBAAgB;AAC/ElB,sBAAoBe;AAEpB,QAAMI,cAAcL,OAAOM,QAAQJ,kBAAkB,YAAY;AAEjE,QAAM,EAAEE,kBAAkBG,iBAAgB,IAAKC,oBAAoBR,OAAOI,kBAAkB;IAC1FK,gBAAgBT,OAAOS;IACvBC,aAAaV,OAAOU;IACpBC,mBAAmBX,OAAOW;IAC1BL,KAAKD;IACLO,QAAQ,OAAOZ,OAAOY,WAAW,YAAYZ,OAAOY,SAAS;EAC/D,CAAA;AAEA,QAAMC,MAAMC,SAASV,kBAAkBG,gBAAAA;AACvC,QAAMQ,KAAKC,QAAQH,KAAK;IAAEI,QAAQjB,OAAOiB;IAAQL,QAAQZ,OAAOY;EAAO,CAAA;AAEvE,SAAO;IACLG;IACAG,OAAO,mCAAA;AACL,YAAML,IAAIM,IAAG;IACf,GAFO;EAGT;AACF;AAzBgBpB;;;AE9BhB,YAAYqB,aAAa;AAQlB,SAASC,oBAAoBC,SAA8B;AAChE,SAAO,gCAASC,cAAcC,KAAcC,MAAgBC,MAAkB;AAC5E,UAAMC,aAAaL,SAASK,cAAcC,eAAAA;AAC1C,UAAMC,cAAeL,IAAgDK;AAErE,QAAI,CAACA,aAAa;AAChB,aAAOH,KAAAA;IACT;AAEA,UAAMI,SAASD,YAAYC,SAAS,CAAA,GAAIC,KAAK,GAAA;AAC7C,UAAMC,SAASH,YAAYG;AAC3B,UAAMC,kBAAkBJ,YAAYI;AACpC,UAAMC,WAAWL,YAAYK;AAE7B,UAAMC,OAAO;MACXH,SACI,4BAA4BA,MAAAA,MAC5B;MACJC,kBACI,gCAAgCN,UAAAA,MAChCK,SACE,iCAAiCL,UAAAA,MACjC,wBAAwBA,UAAAA;MAC9BG,QACI,6BAA6BA,KAAAA,MAC7B;MACJI,WACI,8BAA8BA,QAAAA,MAC9B;MAEHE,OAAOC,OAAAA,EACPN,KAAK,GAAA;AAEPO,IACEC,2BAAmB;MAAEC,QAAQL;IAAK,GAAG,MAAA;AACpCT,WAAAA;IACF,CAAA;EACJ,GApCO;AAqCT;AAtCgBL;","names":["drizzle","postgres","parseConnectionInfo","connectionString","config","maxConnections","idleTimeout","connectionTimeout","ssl","logger","parsedConfigFromUrl","URL","temp","searchParams","delete","toString","error","Error","username","password","hostname","port","pathname","connectionConfig","decodeURIComponent","host","parseInt","max","idle_timeout","connect_timeout","onnotice","console","log","undefined","parseRoleSchema","url","roleSchema","get","sslModeRequired","_cachedRoleSchema","_getRoleSchema","verifyDrizzlePatched","session","require","ok","getAuthContextStore","runWithAuthContext","Error","err","reason","message","String","createDatabase","config","roleSchema","sslModeRequired","parseRoleSchema","connectionString","resolvedSsl","ssl","connectionConfig","parseConnectionInfo","maxConnections","idleTimeout","connectionTimeout","logger","sql","postgres","db","drizzle","schema","close","end","session","createRlsMiddleware","options","rlsMiddleware","req","_res","next","roleSchema","_getRoleSchema","userContext","roles","join","userId","isSystemAccount","userType","sqls","filter","Boolean","session","runWithAuthContext","preSql"]}
+{"version":3,"sources":["../src/runtime-patch.ts","../src/create-database.ts","../src/utils.ts","../src/create-rls-middleware.ts"],"sourcesContent":["/* eslint-disable */\n/**\n * Runtime monkey-patch for drizzle-orm RLS support.\n *\n * Instead of patching files on disk (which breaks under pnpm v10's security policy),\n * this module patches drizzle-orm's PostgresJsPreparedQuery in memory at import time.\n *\n * Node.js CJS module cache guarantees that require('drizzle-orm/postgres-js/session.cjs')\n * returns the same object everywhere, so prototype mutations propagate to all consumers.\n */\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { createRequire } from 'node:module';\nimport { fileURLToPath } from 'node:url';\n\n// Create a require function that works in both ESM and CJS contexts\n// In CJS bundle (tsup output), import.meta.url may be undefined\nconst _require = createRequire(\n  typeof __filename !== 'undefined' ? __filename : fileURLToPath(import.meta.url)\n);\n\nexport interface RequestSessionContext {\n  preSql?: string;\n  postSql?: string;\n}\n\n// ── AsyncLocalStorage for per-request RLS context ──\nconst asyncLocalStorage = new AsyncLocalStorage<RequestSessionContext>();\n\nexport function getAuthContextStore(): RequestSessionContext | undefined {\n  return asyncLocalStorage.getStore();\n}\n\nexport function runWithAuthContext(store: RequestSessionContext, fn: () => void): void {\n  asyncLocalStorage.run(store, fn);\n}\n\n// ── Monkey-patch drizzle-orm ──\nlet _applied = false;\n\nfunction applyRuntimePatch(): void {\n  if (_applied) return;\n\n  // Resolve drizzle-orm root dir from its main entry, then require internal CJS files\n  // by absolute path (bypasses package.json exports restrictions that block deep imports)\n  const path = _require('node:path') as typeof import('node:path');\n  const drizzleEntry = _require.resolve('drizzle-orm');\n  const drizzleDir = drizzleEntry.slice(0, drizzleEntry.lastIndexOf(`${path.sep}drizzle-orm${path.sep}`) + `${path.sep}drizzle-orm`.length);\n  const session = _require(path.join(drizzleDir, 'postgres-js', 'session.cjs'));\n  const tracing = _require(path.join(drizzleDir, 'tracing.cjs'));\n  const utils = _require(path.join(drizzleDir, 'utils.cjs'));\n\n  const PreparedQuery = session.PostgresJsPreparedQuery;\n  if (!PreparedQuery) {\n    throw new Error('Cannot find PostgresJsPreparedQuery in drizzle-orm/postgres-js/session.cjs');\n  }\n\n  const originalExecute = PreparedQuery.prototype.execute;\n\n  // Patch constructor: capture preSql/postSql from AsyncLocalStorage at query creation time\n  const originalInit = PreparedQuery.prototype.constructor;\n  const patchedConstructor = function (this: any, ...args: any[]) {\n    originalInit.apply(this, args);\n    const authContext = getAuthContextStore();\n    this.preSql = authContext?.preSql;\n    this.postSql = authContext?.postSql;\n  };\n  PreparedQuery.prototype.constructor = patchedConstructor;\n\n  // Patch execute: if preSql/postSql exist, wrap in transaction\n  PreparedQuery.prototype.execute = async function (this: any, params?: unknown[]) {\n    const { preSql, postSql } = this;\n\n    if (!preSql && !postSql) {\n      // No RLS context, use original execute\n      return originalExecute.call(this, params);\n    }\n\n    // Execute with RLS context: preSql → main query → postSql in a transaction\n    const { fields, client, joinsNotNullableMap, customResultMapper } = this;\n    const tracer = tracing.tracer;\n\n    return tracer.startActiveSpan('drizzle.driver.execute.transactional', async (_span: any) => {\n      const execInContext = async (sql: any) => {\n        if (preSql) {\n          await tracer.startActiveSpan('drizzle.driver.execute.pre', () => sql.unsafe(preSql));\n        }\n\n        let result;\n        if (!fields && !customResultMapper) {\n          result = await tracer.startActiveSpan('drizzle.driver.execute.main', () => {\n            return this.queryWithCache(this.queryString, params, async () => {\n              return await sql.unsafe(this.queryString, params as any);\n            });\n          });\n        } else {\n          const rows = await tracer.startActiveSpan('drizzle.driver.execute.main', (innerSpan: any) => {\n            innerSpan?.setAttributes({\n              'drizzle.query.text': this.queryString,\n              'drizzle.query.params': JSON.stringify(params),\n            });\n            return this.queryWithCache(this.queryString, params, async () => {\n              return await sql.unsafe(this.queryString, params as any).values();\n            });\n          });\n          result = tracer.startActiveSpan('drizzle.mapResponse', () => {\n            return customResultMapper\n              ? customResultMapper(rows)\n              : rows.map((row: any) => utils.mapResultRow(fields, row, joinsNotNullableMap));\n          });\n        }\n\n        if (postSql) {\n          await tracer.startActiveSpan('drizzle.driver.execute.post', () => sql.unsafe(postSql));\n        }\n\n        return result;\n      };\n\n      // If client has begin(), we're not in a transaction yet — start one\n      if (typeof client.begin === 'function') {\n        return client.begin((tx: any) => execInContext(tx));\n      }\n      // Already in a transaction, execute directly\n      return execInContext(client);\n    });\n  };\n\n  _applied = true;\n}\n\n// Apply patch immediately on import\napplyRuntimePatch();\n","import { drizzle } from 'drizzle-orm/postgres-js';\nimport postgres from 'postgres';\nimport { parseConnectionInfo, parseRoleSchema } from './utils';\nimport type { CreateDatabaseConfig, DatabaseInstance } from './types';\n\n// 模块级缓存，供 createRlsMiddleware 零参数调用时读取\nlet _cachedRoleSchema = '';\n\nexport function _getRoleSchema(): string {\n  return _cachedRoleSchema;\n}\n\nexport function createDatabase(config: CreateDatabaseConfig): DatabaseInstance {\n\n  const { roleSchema, sslModeRequired } = parseRoleSchema(config.connectionString);\n  _cachedRoleSchema = roleSchema;\n\n  const resolvedSsl = config.ssl || (sslModeRequired ? 'require' : false);\n\n  const { connectionString, connectionConfig } = parseConnectionInfo(config.connectionString, {\n    maxConnections: config.maxConnections,\n    idleTimeout: config.idleTimeout,\n    connectionTimeout: config.connectionTimeout,\n    ssl: resolvedSsl,\n    logger: typeof config.logger === 'boolean' ? config.logger : false,\n  });\n\n  const sql = postgres(connectionString, connectionConfig);\n  const db = drizzle(sql, { schema: config.schema, logger: config.logger });\n\n  return {\n    db,\n    close: async () => {\n      await sql.end();\n    },\n  };\n}\n","import { type PostgresOptions } from './types';\n\ninterface ConnectionConfig {\n  maxConnections?: number;\n  idleTimeout?: number;\n  connectionTimeout?: number;\n  ssl?: PostgresOptions['ssl'];\n  logger?: boolean;\n}\n\nexport function parseConnectionInfo(connectionString: string, config?: ConnectionConfig) {\n  const { maxConnections, idleTimeout, connectionTimeout, ssl, logger } = config || {};\n\n  let parsedConfigFromUrl = null;\n  try {\n    parsedConfigFromUrl = new URL(connectionString);\n    const temp = new URL(connectionString);\n    temp.searchParams.delete('schema');\n    connectionString = temp.toString();\n  } catch (error) {\n    throw new Error('Failed to parse connection info');\n  }\n\n  const { username, password, hostname, port, pathname } = parsedConfigFromUrl;\n  const connectionConfig = {\n    username: decodeURIComponent(username),\n    password: decodeURIComponent(password),\n    host: [hostname] as unknown as string,\n    port: [parseInt(port) || 5432] as unknown as number,\n    pathname: decodeURIComponent(pathname),\n    max: maxConnections || 1,\n    idle_timeout: idleTimeout || 20,\n    connect_timeout: connectionTimeout || 10,\n    ssl,\n    onnotice: logger ? console.log : undefined,\n  };\n\n  return { connectionString, connectionConfig };\n}\n\nexport function parseRoleSchema(connectionString: string): { roleSchema: string; sslModeRequired: boolean } {\n  try {\n    const url = new URL(connectionString);\n    const roleSchema = url.searchParams.get('schema') || '';\n    const sslModeRequired = url.searchParams.get('sslmode') === 'require';\n    return { roleSchema, sslModeRequired };\n  } catch {\n    return { roleSchema: '', sslModeRequired: false };\n  }\n}\n","import { type Request, type Response, type NextFunction } from 'express';\nimport { runWithAuthContext } from './runtime-patch';\nimport { _getRoleSchema } from './create-database';\nimport type { UserContext } from './types';\n\nexport interface RlsMiddlewareOptions {\n  roleSchema?: string;\n}\n\nexport function createRlsMiddleware(options?: RlsMiddlewareOptions) {\n  return function rlsMiddleware(req: Request, _res: Response, next: NextFunction) {\n    const roleSchema = options?.roleSchema ?? _getRoleSchema();\n    const userContext = (req as unknown as { userContext: UserContext }).userContext;\n\n    if (!userContext) {\n      return next();\n    }\n\n    const roles = (userContext.roles || []).join(',');\n    const userId = userContext.userId;\n    const isSystemAccount = userContext.isSystemAccount;\n    const userType = userContext.userType;\n\n    const sqls = [\n      userId\n        ? `SET LOCAL app.user_id = '${userId}'`\n        : `SET LOCAL app.user_id = ''`,\n      isSystemAccount\n        ? `SET LOCAL ROLE 'service_role_${roleSchema}'`\n        : userId\n          ? `SET LOCAL ROLE 'authenticated_${roleSchema}'`\n          : `SET LOCAL ROLE 'anon_${roleSchema}'`,\n      roles\n        ? `SET LOCAL app.role_ids = '${roles}'`\n        : `SET LOCAL app.role_ids = ''`,\n      userType\n        ? `SET LOCAL app.user_type = '${userType}'`\n        : `SET LOCAL app.user_type = ''`,\n    ]\n      .filter(Boolean)\n      .join(';');\n\n    runWithAuthContext({ preSql: sqls }, () => {\n      next();\n    });\n  };\n}\n"],"mappings":";;;;AAUA,SAASA,yBAAyB;AAClC,SAASC,qBAAqB;AAC9B,SAASC,qBAAqB;AAI9B,IAAMC,WAAWC,cACf,OAAOC,eAAe,cAAcA,aAAaC,cAAc,YAAYC,GAAG,CAAA;AAShF,IAAMC,oBAAoB,IAAIC,kBAAAA;AAEvB,SAASC,sBAAAA;AACd,SAAOF,kBAAkBG,SAAQ;AACnC;AAFgBD;AAIT,SAASE,mBAAmBC,OAA8BC,IAAc;AAC7EN,oBAAkBO,IAAIF,OAAOC,EAAAA;AAC/B;AAFgBF;AAKhB,IAAII,WAAW;AAEf,SAASC,oBAAAA;AACP,MAAID,SAAU;AAId,QAAME,OAAOf,SAAS,WAAA;AACtB,QAAMgB,eAAehB,SAASiB,QAAQ,aAAA;AACtC,QAAMC,aAAaF,aAAaG,MAAM,GAAGH,aAAaI,YAAY,GAAGL,KAAKM,GAAG,cAAcN,KAAKM,GAAG,EAAE,IAAI,GAAGN,KAAKM,GAAG,cAAcC,MAAM;AACxI,QAAMC,UAAUvB,SAASe,KAAKS,KAAKN,YAAY,eAAe,aAAA,CAAA;AAC9D,QAAMO,UAAUzB,SAASe,KAAKS,KAAKN,YAAY,aAAA,CAAA;AAC/C,QAAMQ,QAAQ1B,SAASe,KAAKS,KAAKN,YAAY,WAAA,CAAA;AAE7C,QAAMS,gBAAgBJ,QAAQK;AAC9B,MAAI,CAACD,eAAe;AAClB,UAAM,IAAIE,MAAM,4EAAA;EAClB;AAEA,QAAMC,kBAAkBH,cAAcI,UAAUC;AAGhD,QAAMC,eAAeN,cAAcI,UAAU;AAC7C,QAAMG,qBAAqB,mCAAwBC,MAAW;AAC5DF,iBAAaG,MAAM,MAAMD,IAAAA;AACzB,UAAME,cAAc9B,oBAAAA;AACpB,SAAK+B,SAASD,aAAaC;AAC3B,SAAKC,UAAUF,aAAaE;EAC9B,GAL2B;AAM3BZ,gBAAcI,UAAU,cAAcG;AAGtCP,gBAAcI,UAAUC,UAAU,eAA2BQ,QAAkB;AAC7E,UAAM,EAAEF,QAAQC,QAAO,IAAK;AAE5B,QAAI,CAACD,UAAU,CAACC,SAAS;AAEvB,aAAOT,gBAAgBW,KAAK,MAAMD,MAAAA;IACpC;AAGA,UAAM,EAAEE,QAAQC,QAAQC,qBAAqBC,mBAAkB,IAAK;AACpE,UAAMC,SAASrB,QAAQqB;AAEvB,WAAOA,OAAOC,gBAAgB,wCAAwC,OAAOC,UAAAA;AAC3E,YAAMC,gBAAgB,8BAAOC,QAAAA;AAC3B,YAAIZ,QAAQ;AACV,gBAAMQ,OAAOC,gBAAgB,8BAA8B,MAAMG,IAAIC,OAAOb,MAAAA,CAAAA;QAC9E;AAEA,YAAIc;AACJ,YAAI,CAACV,UAAU,CAACG,oBAAoB;AAClCO,mBAAS,MAAMN,OAAOC,gBAAgB,+BAA+B,MAAA;AACnE,mBAAO,KAAKM,eAAe,KAAKC,aAAad,QAAQ,YAAA;AACnD,qBAAO,MAAMU,IAAIC,OAAO,KAAKG,aAAad,MAAAA;YAC5C,CAAA;UACF,CAAA;QACF,OAAO;AACL,gBAAMe,OAAO,MAAMT,OAAOC,gBAAgB,+BAA+B,CAACS,cAAAA;AACxEA,uBAAWC,cAAc;cACvB,sBAAsB,KAAKH;cAC3B,wBAAwBI,KAAKC,UAAUnB,MAAAA;YACzC,CAAA;AACA,mBAAO,KAAKa,eAAe,KAAKC,aAAad,QAAQ,YAAA;AACnD,qBAAO,MAAMU,IAAIC,OAAO,KAAKG,aAAad,MAAAA,EAAeoB,OAAM;YACjE,CAAA;UACF,CAAA;AACAR,mBAASN,OAAOC,gBAAgB,uBAAuB,MAAA;AACrD,mBAAOF,qBACHA,mBAAmBU,IAAAA,IACnBA,KAAKM,IAAI,CAACC,QAAapC,MAAMqC,aAAarB,QAAQoB,KAAKlB,mBAAAA,CAAAA;UAC7D,CAAA;QACF;AAEA,YAAIL,SAAS;AACX,gBAAMO,OAAOC,gBAAgB,+BAA+B,MAAMG,IAAIC,OAAOZ,OAAAA,CAAAA;QAC/E;AAEA,eAAOa;MACT,GAlCsB;AAqCtB,UAAI,OAAOT,OAAOqB,UAAU,YAAY;AACtC,eAAOrB,OAAOqB,MAAM,CAACC,OAAYhB,cAAcgB,EAAAA,CAAAA;MACjD;AAEA,aAAOhB,cAAcN,MAAAA;IACvB,CAAA;EACF;AAEA9B,aAAW;AACb;AAzFSC;AA4FTA,kBAAAA;;;ACnIA,SAASoD,eAAe;AACxB,OAAOC,cAAc;;;ACSd,SAASC,oBAAoBC,kBAA0BC,QAAyB;AACrF,QAAM,EAAEC,gBAAgBC,aAAaC,mBAAmBC,KAAKC,OAAM,IAAKL,UAAU,CAAC;AAEnF,MAAIM,sBAAsB;AAC1B,MAAI;AACFA,0BAAsB,IAAIC,IAAIR,gBAAAA;AAC9B,UAAMS,OAAO,IAAID,IAAIR,gBAAAA;AACrBS,SAAKC,aAAaC,OAAO,QAAA;AACzBX,uBAAmBS,KAAKG,SAAQ;EAClC,SAASC,OAAO;AACd,UAAM,IAAIC,MAAM,iCAAA;EAClB;AAEA,QAAM,EAAEC,UAAUC,UAAUC,UAAUC,MAAMC,SAAQ,IAAKZ;AACzD,QAAMa,mBAAmB;IACvBL,UAAUM,mBAAmBN,QAAAA;IAC7BC,UAAUK,mBAAmBL,QAAAA;IAC7BM,MAAM;MAACL;;IACPC,MAAM;MAACK,SAASL,IAAAA,KAAS;;IACzBC,UAAUE,mBAAmBF,QAAAA;IAC7BK,KAAKtB,kBAAkB;IACvBuB,cAActB,eAAe;IAC7BuB,iBAAiBtB,qBAAqB;IACtCC;IACAsB,UAAUrB,SAASsB,QAAQC,MAAMC;EACnC;AAEA,SAAO;IAAE9B;IAAkBoB;EAAiB;AAC9C;AA5BgBrB;AA8BT,SAASgC,gBAAgB/B,kBAAwB;AACtD,MAAI;AACF,UAAMgC,MAAM,IAAIxB,IAAIR,gBAAAA;AACpB,UAAMiC,aAAaD,IAAItB,aAAawB,IAAI,QAAA,KAAa;AACrD,UAAMC,kBAAkBH,IAAItB,aAAawB,IAAI,SAAA,MAAe;AAC5D,WAAO;MAAED;MAAYE;IAAgB;EACvC,QAAQ;AACN,WAAO;MAAEF,YAAY;MAAIE,iBAAiB;IAAM;EAClD;AACF;AATgBJ;;;ADlChB,IAAIK,oBAAoB;AAEjB,SAASC,iBAAAA;AACd,SAAOD;AACT;AAFgBC;AAIT,SAASC,eAAeC,QAA4B;AAEzD,QAAM,EAAEC,YAAYC,gBAAe,IAAKC,gBAAgBH,OAAOI,gBAAgB;AAC/EP,sBAAoBI;AAEpB,QAAMI,cAAcL,OAAOM,QAAQJ,kBAAkB,YAAY;AAEjE,QAAM,EAAEE,kBAAkBG,iBAAgB,IAAKC,oBAAoBR,OAAOI,kBAAkB;IAC1FK,gBAAgBT,OAAOS;IACvBC,aAAaV,OAAOU;IACpBC,mBAAmBX,OAAOW;IAC1BL,KAAKD;IACLO,QAAQ,OAAOZ,OAAOY,WAAW,YAAYZ,OAAOY,SAAS;EAC/D,CAAA;AAEA,QAAMC,MAAMC,SAASV,kBAAkBG,gBAAAA;AACvC,QAAMQ,KAAKC,QAAQH,KAAK;IAAEI,QAAQjB,OAAOiB;IAAQL,QAAQZ,OAAOY;EAAO,CAAA;AAEvE,SAAO;IACLG;IACAG,OAAO,mCAAA;AACL,YAAML,IAAIM,IAAG;IACf,GAFO;EAGT;AACF;AAxBgBpB;;;AEHT,SAASqB,oBAAoBC,SAA8B;AAChE,SAAO,gCAASC,cAAcC,KAAcC,MAAgBC,MAAkB;AAC5E,UAAMC,aAAaL,SAASK,cAAcC,eAAAA;AAC1C,UAAMC,cAAeL,IAAgDK;AAErE,QAAI,CAACA,aAAa;AAChB,aAAOH,KAAAA;IACT;AAEA,UAAMI,SAASD,YAAYC,SAAS,CAAA,GAAIC,KAAK,GAAA;AAC7C,UAAMC,SAASH,YAAYG;AAC3B,UAAMC,kBAAkBJ,YAAYI;AACpC,UAAMC,WAAWL,YAAYK;AAE7B,UAAMC,OAAO;MACXH,SACI,4BAA4BA,MAAAA,MAC5B;MACJC,kBACI,gCAAgCN,UAAAA,MAChCK,SACE,iCAAiCL,UAAAA,MACjC,wBAAwBA,UAAAA;MAC9BG,QACI,6BAA6BA,KAAAA,MAC7B;MACJI,WACI,8BAA8BA,QAAAA,MAC9B;MAEHE,OAAOC,OAAAA,EACPN,KAAK,GAAA;AAERO,uBAAmB;MAAEC,QAAQJ;IAAK,GAAG,MAAA;AACnCT,WAAAA;IACF,CAAA;EACF,GAnCO;AAoCT;AArCgBL;","names":["AsyncLocalStorage","createRequire","fileURLToPath","_require","createRequire","__filename","fileURLToPath","url","asyncLocalStorage","AsyncLocalStorage","getAuthContextStore","getStore","runWithAuthContext","store","fn","run","_applied","applyRuntimePatch","path","drizzleEntry","resolve","drizzleDir","slice","lastIndexOf","sep","length","session","join","tracing","utils","PreparedQuery","PostgresJsPreparedQuery","Error","originalExecute","prototype","execute","originalInit","patchedConstructor","args","apply","authContext","preSql","postSql","params","call","fields","client","joinsNotNullableMap","customResultMapper","tracer","startActiveSpan","_span","execInContext","sql","unsafe","result","queryWithCache","queryString","rows","innerSpan","setAttributes","JSON","stringify","values","map","row","mapResultRow","begin","tx","drizzle","postgres","parseConnectionInfo","connectionString","config","maxConnections","idleTimeout","connectionTimeout","ssl","logger","parsedConfigFromUrl","URL","temp","searchParams","delete","toString","error","Error","username","password","hostname","port","pathname","connectionConfig","decodeURIComponent","host","parseInt","max","idle_timeout","connect_timeout","onnotice","console","log","undefined","parseRoleSchema","url","roleSchema","get","sslModeRequired","_cachedRoleSchema","_getRoleSchema","createDatabase","config","roleSchema","sslModeRequired","parseRoleSchema","connectionString","resolvedSsl","ssl","connectionConfig","parseConnectionInfo","maxConnections","idleTimeout","connectionTimeout","logger","sql","postgres","db","drizzle","schema","close","end","createRlsMiddleware","options","rlsMiddleware","req","_res","next","roleSchema","_getRoleSchema","userContext","roles","join","userId","isSystemAccount","userType","sqls","filter","Boolean","runWithAuthContext","preSql"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/express-datapaas",
-  "version": "0.0.3",
+  "version": "1.0.0",
   "description": "Drizzle ORM + PostgreSQL with RLS support for Express",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,9 +21,7 @@
     "node": ">=18.0.0"
   },
   "files": [
-    "dist",
-    "patches",
-    "scripts"
+    "dist"
   ],
   "exports": {
     ".": {
@@ -34,8 +32,6 @@
   },
   "scripts": {
     "build": "tsup",
-    "postinstall": "node scripts/apply-patch.js",
-    "apply-patch": "node scripts/apply-patch.js",
     "dev": "tsup --watch",
     "clean": "rm -rf dist",
     "lint": "eslint src/**/*.ts",
@@ -45,7 +41,6 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "patch-package": "^8.0.0",
     "postgres": "^3.4.3"
   },
   "devDependencies": {

package/patches/drizzle-orm+0.44.6.patch

@@ -1,178 +0,0 @@
-diff --git a/node_modules/drizzle-orm/postgres-js/session.cjs b/node_modules/drizzle-orm/postgres-js/session.cjs
-index dac222a..7708081 100644
---- a/node_modules/drizzle-orm/postgres-js/session.cjs
-+++ b/node_modules/drizzle-orm/postgres-js/session.cjs
-@@ -20,9 +20,12 @@ var session_exports = {};
- __export(session_exports, {
-   PostgresJsPreparedQuery: () => PostgresJsPreparedQuery,
-   PostgresJsSession: () => PostgresJsSession,
--  PostgresJsTransaction: () => PostgresJsTransaction
-+  PostgresJsTransaction: () => PostgresJsTransaction,
-+  getAuthContextStore: () => getAuthContextStore,
-+  runWithAuthContext: () => runWithAuthContext,
- });
- module.exports = __toCommonJS(session_exports);
-+var { AsyncLocalStorage } = require('node:async_hooks');
- var import_core = require("../cache/core/index.cjs");
- var import_entity = require("../entity.cjs");
- var import_logger = require("../logger.cjs");
-@@ -31,10 +34,24 @@ var import_session = require("../pg-core/session.cjs");
- var import_sql = require("../sql/sql.cjs");
- var import_tracing = require("../tracing.cjs");
- var import_utils = require("../utils.cjs");
-+
-+const asyncLocalStorage = new AsyncLocalStorage();
-+
-+function getAuthContextStore() {
-+  return asyncLocalStorage.getStore();
-+}
-+
-+function runWithAuthContext(store, fn) {
-+  return asyncLocalStorage.run(store, fn);
-+}
-+
- class PostgresJsPreparedQuery extends import_session.PgPreparedQuery {
-   constructor(client, queryString, params, logger, cache, queryMetadata, cacheConfig, fields, _isResponseInArrayMode, customResultMapper) {
-     super({ sql: queryString, params }, cache, queryMetadata, cacheConfig);
-     this.client = client;
-+    const authContextStore = getAuthContextStore();
-+    this.preSql = authContextStore?.preSql;
-+    this.postSql = authContextStore?.postSql;
-     this.queryString = queryString;
-     this.params = params;
-     this.logger = logger;
-@@ -51,21 +68,103 @@ class PostgresJsPreparedQuery extends import_session.PgPreparedQuery {
-         "drizzle.query.params": JSON.stringify(params)
-       });
-       this.logger.logQuery(this.queryString, params);
--      const { fields, queryString: query, client, joinsNotNullableMap, customResultMapper } = this;
-+      const { fields, client, joinsNotNullableMap, customResultMapper, preSql, postSql } = this;
-+      
-+      // 在同一事务中依次执行：preSql（可选）→ 主查询 → postSql（可选）
-+      if (preSql || postSql) {
-+        return import_tracing.tracer.startActiveSpan("drizzle.driver.execute.transactional", async () => {
-+          // 若当前不在事务中（client 有 begin 方法），则开启事务；否则复用当前事务
-+          if (typeof client.begin === 'function') {
-+            return client.begin(async (tx) => {
-+              // 若存在 preSql，则执行
-+              if (preSql) {
-+                await import_tracing.tracer.startActiveSpan("drizzle.driver.execute.pre", () => tx.unsafe(preSql));
-+              }
-+              
-+              // 执行主查询
-+              let result;
-+              if (!fields && !customResultMapper) {
-+                result = await import_tracing.tracer.startActiveSpan("drizzle.driver.execute.main", () => {
-+                  return this.queryWithCache(this.queryString, params, async () => {
-+                    return await tx.unsafe(this.queryString, params);
-+                  });
-+                });
-+              } else {
-+                const rows = await import_tracing.tracer.startActiveSpan("drizzle.driver.execute.main", () => {
-+                  span?.setAttributes({
-+                    "drizzle.query.text": this.queryString,
-+                    "drizzle.query.params": JSON.stringify(params)
-+                  });
-+                  return this.queryWithCache(this.queryString, params, async () => {
-+                    return await tx.unsafe(this.queryString, params).values();
-+                  });;
-+                });
-+                result = import_tracing.tracer.startActiveSpan("drizzle.mapResponse", () => {
-+                  return customResultMapper ? customResultMapper(rows) : rows.map((row) => (0, import_utils.mapResultRow)(fields, row, joinsNotNullableMap));
-+                });
-+              }
-+              
-+              // 若存在 postSql，则执行
-+              if (postSql) {
-+                await import_tracing.tracer.startActiveSpan("drizzle.driver.execute.post", () => tx.unsafe(postSql));
-+              }
-+              
-+              return result;
-+            });
-+          } else {
-+            // 已在事务中，直接执行
-+            // 若存在 preSql，则执行
-+            if (preSql) {
-+              await import_tracing.tracer.startActiveSpan("drizzle.driver.execute.pre", () => client.unsafe(preSql));
-+            }
-+            
-+            // 执行主查询
-+            let result;
-+            if (!fields && !customResultMapper) {
-+              result = await import_tracing.tracer.startActiveSpan("drizzle.driver.execute.main", () => {
-+                return this.queryWithCache(this.queryString, params, async () => {
-+                  return await client.unsafe(this.queryString, params);
-+                });
-+              });
-+            } else {
-+              const rows = await import_tracing.tracer.startActiveSpan("drizzle.driver.execute.main", () => {
-+                span?.setAttributes({
-+                  "drizzle.query.text": this.queryString,
-+                  "drizzle.query.params": JSON.stringify(params)
-+                });
-+                return this.queryWithCache(this.queryString, params, async () => {
-+                  return await client.unsafe(this.queryString, params).values();
-+                });
-+              });
-+              result = import_tracing.tracer.startActiveSpan("drizzle.mapResponse", () => {
-+                return customResultMapper ? customResultMapper(rows) : rows.map((row) => (0, import_utils.mapResultRow)(fields, row, joinsNotNullableMap));
-+              });
-+            }
-+            
-+            // 若存在 postSql，则执行
-+            if (postSql) {
-+              await import_tracing.tracer.startActiveSpan("drizzle.driver.execute.post", () => client.unsafe(postSql));
-+            }
-+            
-+            return result;
-+          }
-+        });
-+      }
-+      // 单语句执行（原始逻辑）
-       if (!fields && !customResultMapper) {
-         return import_tracing.tracer.startActiveSpan("drizzle.driver.execute", () => {
--          return this.queryWithCache(query, params, async () => {
--            return await client.unsafe(query, params);
-+          return this.queryWithCache(this.queryString, params, async () => {
-+            return await client.unsafe(this.queryString, params);
-           });
-         });
-       }
-       const rows = await import_tracing.tracer.startActiveSpan("drizzle.driver.execute", () => {
-         span?.setAttributes({
--          "drizzle.query.text": query,
-+          "drizzle.query.text": this.queryString,
-           "drizzle.query.params": JSON.stringify(params)
-         });
--        return this.queryWithCache(query, params, async () => {
--          return await client.unsafe(query, params).values();
-+        return this.queryWithCache(this.queryString, params, async () => {
-+          return await client.unsafe(this.queryString, params).values();
-         });
-       });
-       return import_tracing.tracer.startActiveSpan("drizzle.mapResponse", () => {
-@@ -169,6 +268,8 @@ class PostgresJsTransaction extends import_pg_core.PgTransaction {
- 0 && (module.exports = {
-   PostgresJsPreparedQuery,
-   PostgresJsSession,
--  PostgresJsTransaction
-+  PostgresJsTransaction,
-+  getAuthContextStore,
-+  runWithAuthContext,
- });
- //# sourceMappingURL=session.cjs.map
-
-diff --git a/node_modules/drizzle-orm/postgres-js/session.d.ts b/node_modules/drizzle-orm/postgres-js/session.d.ts
-index bccaa53..b07425b 100644
---- a/node_modules/drizzle-orm/postgres-js/session.d.ts
-+++ b/node_modules/drizzle-orm/postgres-js/session.d.ts
-@@ -58,3 +58,8 @@ export declare class PostgresJsTransaction<TFullSchema extends Record<string, un
- export interface PostgresJsQueryResultHKT extends PgQueryResultHKT {
-     type: RowList<Assume<this['row'], Row>[]>;
- }
-+export interface RequestSessionContext {
-+    preSql?: string;
-+}
-+export declare function getAuthContextStore(): RequestSessionContext | undefined;
-+export declare function runWithAuthContext(store: RequestSessionContext, fn: () => void): void;
-

package/scripts/apply-patch.js

@@ -1,78 +0,0 @@
-#!/usr/bin/env node
-import { execSync } from "child_process";
-import { createRequire } from "node:module";
-import fs from "fs";
-import path from "path";
-import { fileURLToPath } from "url";
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const sdkRoot = path.resolve(__dirname, "..");
-const patchDir = path.resolve(sdkRoot, "patches");
-const esmRequire = createRequire(import.meta.url);
-
-/**
- * 通过 Node 模块解析定位 drizzle-orm 所在的 node_modules 父目录。
- * 兼容 npm（扁平）、yarn（扁平）、pnpm（隔离 + symlink）。
- *
- * 注意：drizzle-orm 的 exports 字段未导出 ./package.json，
- * 因此使用 resolve("drizzle-orm") 获取入口文件路径，
- * 再通过 "node_modules/drizzle-orm/" marker 截取 hostRoot。
- */
-function resolveHostRoot() {
-  const resolved = fs.realpathSync(esmRequire.resolve("drizzle-orm"));
-  // resolved: .../node_modules/drizzle-orm/index.cjs (npm/yarn)
-  //       或: .../.pnpm/drizzle-orm@0.44.6/node_modules/drizzle-orm/index.cjs (pnpm)
-  const marker = `${path.sep}node_modules${path.sep}drizzle-orm${path.sep}`;
-  const idx = resolved.lastIndexOf(marker);
-  if (idx === -1) {
-    throw new Error(
-      `Cannot locate node_modules/drizzle-orm in resolved path: ${resolved}`,
-    );
-  }
-  return resolved.substring(0, idx);
-}
-
-/**
- * 解析 patch-package CLI 入口的绝对路径，避免依赖 npx 在错误 cwd 下查找。
- */
-function resolvePatchBin() {
-  const pkgPath = esmRequire.resolve("patch-package/package.json");
-  const pkgDir = path.dirname(pkgPath);
-  const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
-  const bin =
-    typeof pkg.bin === "string" ? pkg.bin : pkg.bin["patch-package"];
-  return path.resolve(pkgDir, bin);
-}
-
-// ── main ──
-const hostRoot = resolveHostRoot();
-const patchBin = resolvePatchBin();
-
-// patch-package 要求 --patch-dir 为相对路径（相对于 cwd）
-const relativePatchDir = path.relative(hostRoot, patchDir);
-
-console.log(`[patch] host root      : ${hostRoot}`);
-console.log(`[patch] patch-package  : ${patchBin}`);
-console.log(`[patch] patch dir      : ${patchDir} (relative: ${relativePatchDir})`);
-
-// pnpm 的虚拟目录下可能没有 package.json，patch-package 需要它才能工作
-const hostPkgPath = path.join(hostRoot, "package.json");
-const needsTempPkg = !fs.existsSync(hostPkgPath);
-if (needsTempPkg) {
-  fs.writeFileSync(hostPkgPath, JSON.stringify({ private: true }));
-}
-
-try {
-  execSync(`node "${patchBin}" --patch-dir "${relativePatchDir}"`, {
-    stdio: "inherit",
-    cwd: hostRoot,
-  });
-  console.log("[patch] drizzle-orm patched ✅");
-} catch (err) {
-  console.error("[patch] Failed to apply drizzle-orm patch ❌", err);
-  process.exit(1);
-} finally {
-  if (needsTempPkg) {
-    try { fs.unlinkSync(hostPkgPath); } catch { /* ignore */ }
-  }
-}