@lunora/server 1.0.0-alpha.3 → 1.0.0-alpha.30

package/dist/rls/testing.d.mts

@@ -1,11 +1,11 @@
-import { P as PolicyOperation, R as Role, a as Policy } from "../packem_shared/types.d-DmvyEMD6.mjs";
+import { P as PolicyOperation, R as Role, a as Policy } from "../packem_shared/types.d-C4CMJK8x.mjs";
 import "../data-model.mjs";
 /**
-* The slice of a request identity a policy reads. Mirrors the
-* `PolicyContext.auth` shape the middleware builds at request time — every
-* field is optional and defaults the same way the middleware defaults it
-* (`userId`/`identity` → `null`, `roles` → `[]`).
-*/
+ * The slice of a request identity a policy reads. Mirrors the
+ * `PolicyContext.auth` shape the middleware builds at request time — every
+ * field is optional and defaults the same way the middleware defaults it
+ * (`userId`/`identity` → `null`, `roles` → `[]`).
+ */
 interface TestIdentity {
   /** Raw identity claims a policy may branch on (`auth.identity.email`, …). */
   identity?: Record<string, unknown> | null;
@@ -17,32 +17,32 @@ interface TestIdentity {
 /** Options for {@link expectPolicy}. */
 interface ExpectPolicyOptions<Context = unknown> {
   /**
-  * The procedure context a policy reads via `ctx` (e.g. `ctx.orgId`). Held
-  * for the whole harness; pass a fresh `expectPolicy(..., { ctx })` for a
-  * different context. Defaults to an empty object.
-  */
+   * The procedure context a policy reads via `ctx` (e.g. `ctx.orgId`). Held
+   * for the whole harness; pass a fresh `expectPolicy(..., { ctx })` for a
+   * different context. Defaults to an empty object.
+   */
   ctx?: Context;
   /**
-  * Role→permission grants backing `auth.can(...)` — the same registry passed
-  * to `rls(policies, { roles })`. A role not listed here grants nothing, so
-  * `can(...)` fails closed exactly as it does in production.
-  */
+   * Role→permission grants backing `auth.can(...)` — the same registry passed
+   * to `rls(policies, { roles })`. A role not listed here grants nothing, so
+   * `can(...)` fails closed exactly as it does in production.
+   */
   roles?: ReadonlyArray<Role>;
 }
 /** A harness bound to one identity; answers can/cannot for an `(op, table, row)`. */
 interface BoundPolicyAssertion {
   /**
-  * Would this identity be **allowed** the operation on `row`?
-  *
-  * - `read` — is `row` visible? `true` when the table has no read policy (unrestricted), or when the effective read `baseWhere` matches `row`.
-  * - `insert` — is the candidate `row` allowed by the insert policies?
-  * - `update` / `delete` — is the pre-write `row` allowed? For `update` pass `nextRow` to also assert the post-image (WITH CHECK) — a policy can't be satisfied by the old row while the patch reassigns it to another tenant.
-  *
-  * A table with **no** policy in the list is unguarded → always `true`
-  * (mirrors the middleware passing such tables through unwrapped). A table
-  * that participates but declares no policy for the write `op` denies
-  * (default-DENY), exactly as the middleware does.
-  */
+   * Would this identity be **allowed** the operation on `row`?
+   *
+   * - `read` — is `row` visible? `true` when the table has no read policy (unrestricted), or when the effective read `baseWhere` matches `row`.
+   * - `insert` — is the candidate `row` allowed by the insert policies?
+   * - `update` / `delete` — is the pre-write `row` allowed? For `update` pass `nextRow` to also assert the post-image (WITH CHECK) — a policy can't be satisfied by the old row while the patch reassigns it to another tenant.
+   *
+   * A table with **no** policy in the list is unguarded → always `true`
+   * (mirrors the middleware passing such tables through unwrapped). A table
+   * that participates but declares no policy for the write `op` denies
+   * (default-DENY), exactly as the middleware does.
+   */
   can: (op: PolicyOperation, table: string, row?: Record<string, unknown>, nextRow?: Record<string, unknown>) => boolean;
   /** Negation of {@link BoundPolicyAssertion.can} — reads more naturally in a denial test. */
   cannot: (op: PolicyOperation, table: string, row?: Record<string, unknown>, nextRow?: Record<string, unknown>) => boolean;
@@ -53,11 +53,11 @@ interface PolicyAssertion {
   as: (identity?: TestIdentity | null) => BoundPolicyAssertion;
 }
 /**
-* Build an in-process assertion harness over a policy set. Reuses the `rls()`
-* middleware's own evaluation primitives, so an assertion is faithful to
-* request-time behaviour by construction.
-* @param policies the policy list, typically from `definePolicies([...])`.
-* @param options role registry + procedure `ctx` (see {@link ExpectPolicyOptions}).
-*/
+ * Build an in-process assertion harness over a policy set. Reuses the `rls()`
+ * middleware's own evaluation primitives, so an assertion is faithful to
+ * request-time behaviour by construction.
+ * @param policies the policy list, typically from `definePolicies([...])`.
+ * @param options role registry + procedure `ctx` (see {@link ExpectPolicyOptions}).
+ */
 declare const expectPolicy: <Context = unknown>(policies: ReadonlyArray<Policy<Context>>, options?: ExpectPolicyOptions<Context>) => PolicyAssertion;
 export { BoundPolicyAssertion, ExpectPolicyOptions, PolicyAssertion, TestIdentity, expectPolicy };

package/dist/rls/testing.d.ts

@@ -1,11 +1,11 @@
-import { P as PolicyOperation, R as Role, a as Policy } from "../packem_shared/types.d-BDY0FYHK.js";
+import { P as PolicyOperation, R as Role, a as Policy } from "../packem_shared/types.d-DdYF8E18.js";
 import "../data-model.js";
 /**
-* The slice of a request identity a policy reads. Mirrors the
-* `PolicyContext.auth` shape the middleware builds at request time — every
-* field is optional and defaults the same way the middleware defaults it
-* (`userId`/`identity` → `null`, `roles` → `[]`).
-*/
+ * The slice of a request identity a policy reads. Mirrors the
+ * `PolicyContext.auth` shape the middleware builds at request time — every
+ * field is optional and defaults the same way the middleware defaults it
+ * (`userId`/`identity` → `null`, `roles` → `[]`).
+ */
 interface TestIdentity {
   /** Raw identity claims a policy may branch on (`auth.identity.email`, …). */
   identity?: Record<string, unknown> | null;
@@ -17,32 +17,32 @@ interface TestIdentity {
 /** Options for {@link expectPolicy}. */
 interface ExpectPolicyOptions<Context = unknown> {
   /**
-  * The procedure context a policy reads via `ctx` (e.g. `ctx.orgId`). Held
-  * for the whole harness; pass a fresh `expectPolicy(..., { ctx })` for a
-  * different context. Defaults to an empty object.
-  */
+   * The procedure context a policy reads via `ctx` (e.g. `ctx.orgId`). Held
+   * for the whole harness; pass a fresh `expectPolicy(..., { ctx })` for a
+   * different context. Defaults to an empty object.
+   */
   ctx?: Context;
   /**
-  * Role→permission grants backing `auth.can(...)` — the same registry passed
-  * to `rls(policies, { roles })`. A role not listed here grants nothing, so
-  * `can(...)` fails closed exactly as it does in production.
-  */
+   * Role→permission grants backing `auth.can(...)` — the same registry passed
+   * to `rls(policies, { roles })`. A role not listed here grants nothing, so
+   * `can(...)` fails closed exactly as it does in production.
+   */
   roles?: ReadonlyArray<Role>;
 }
 /** A harness bound to one identity; answers can/cannot for an `(op, table, row)`. */
 interface BoundPolicyAssertion {
   /**
-  * Would this identity be **allowed** the operation on `row`?
-  *
-  * - `read` — is `row` visible? `true` when the table has no read policy (unrestricted), or when the effective read `baseWhere` matches `row`.
-  * - `insert` — is the candidate `row` allowed by the insert policies?
-  * - `update` / `delete` — is the pre-write `row` allowed? For `update` pass `nextRow` to also assert the post-image (WITH CHECK) — a policy can't be satisfied by the old row while the patch reassigns it to another tenant.
-  *
-  * A table with **no** policy in the list is unguarded → always `true`
-  * (mirrors the middleware passing such tables through unwrapped). A table
-  * that participates but declares no policy for the write `op` denies
-  * (default-DENY), exactly as the middleware does.
-  */
+   * Would this identity be **allowed** the operation on `row`?
+   *
+   * - `read` — is `row` visible? `true` when the table has no read policy (unrestricted), or when the effective read `baseWhere` matches `row`.
+   * - `insert` — is the candidate `row` allowed by the insert policies?
+   * - `update` / `delete` — is the pre-write `row` allowed? For `update` pass `nextRow` to also assert the post-image (WITH CHECK) — a policy can't be satisfied by the old row while the patch reassigns it to another tenant.
+   *
+   * A table with **no** policy in the list is unguarded → always `true`
+   * (mirrors the middleware passing such tables through unwrapped). A table
+   * that participates but declares no policy for the write `op` denies
+   * (default-DENY), exactly as the middleware does.
+   */
   can: (op: PolicyOperation, table: string, row?: Record<string, unknown>, nextRow?: Record<string, unknown>) => boolean;
   /** Negation of {@link BoundPolicyAssertion.can} — reads more naturally in a denial test. */
   cannot: (op: PolicyOperation, table: string, row?: Record<string, unknown>, nextRow?: Record<string, unknown>) => boolean;
@@ -53,11 +53,11 @@ interface PolicyAssertion {
   as: (identity?: TestIdentity | null) => BoundPolicyAssertion;
 }
 /**
-* Build an in-process assertion harness over a policy set. Reuses the `rls()`
-* middleware's own evaluation primitives, so an assertion is faithful to
-* request-time behaviour by construction.
-* @param policies the policy list, typically from `definePolicies([...])`.
-* @param options role registry + procedure `ctx` (see {@link ExpectPolicyOptions}).
-*/
+ * Build an in-process assertion harness over a policy set. Reuses the `rls()`
+ * middleware's own evaluation primitives, so an assertion is faithful to
+ * request-time behaviour by construction.
+ * @param policies the policy list, typically from `definePolicies([...])`.
+ * @param options role registry + procedure `ctx` (see {@link ExpectPolicyOptions}).
+ */
 declare const expectPolicy: <Context = unknown>(policies: ReadonlyArray<Policy<Context>>, options?: ExpectPolicyOptions<Context>) => PolicyAssertion;
 export { BoundPolicyAssertion, ExpectPolicyOptions, PolicyAssertion, TestIdentity, expectPolicy };

package/dist/rls/testing.mjs

@@ -1,4 +1,4 @@
-import { indexRolePermissions, computeReadBaseWhere, matchesWhere, evaluateWrite, permissionName } from '../packem_shared/rls-Bi9HiyDC.mjs';
+import { indexRolePermissions, computeReadBaseWhere, matchesWhere, evaluateWrite, permissionName } from '../packem_shared/rls-BaDQf7MG.mjs';
 
 const expectPolicy = (policies, options = {}) => {
   const rolePermissions = indexRolePermissions(options.roles);