@mikro-orm/entity-generator 7.2.0-dev.9 → 7.2.1-dev.0

package/EntityGenerator.d.ts

@@ -7,6 +7,8 @@ export declare class EntityGenerator {
     static register(orm: MikroORM): void;
     generate(options?: GenerateOptions): Promise<string[]>;
     private getEntityMetadata;
+    /** Carries introspected RLS state (policies + enablement) from the table onto the entity metadata. */
+    private applyRowLevelSecurity;
     private cleanUpReferentialIntegrityRules;
     private matchName;
     private detectManyToManyRelations;

package/EntityGenerator.js

@@ -100,7 +100,9 @@ export class EntityGenerator {
                     }
                 }
             }
-            return table.getEntityDeclaration(this.#namingStrategy, this.#helper, options.scalarPropertiesForRelations);
+            const meta = table.getEntityDeclaration(this.#namingStrategy, this.#helper, options.scalarPropertiesForRelations);
+            this.applyRowLevelSecurity(meta, table);
+            return meta;
         });
         for (const meta of metadata) {
             for (const prop of meta.relations) {
@@ -159,6 +161,28 @@ export class EntityGenerator {
         await options.onProcessedMetadata?.(metadata, this.#platform);
         return metadata;
     }
+    /** Carries introspected RLS state (policies + enablement) from the table onto the entity metadata. */
+    applyRowLevelSecurity(meta, table) {
+        meta.policies = table.getPolicies().map(policy => ({
+            name: policy.name,
+            command: policy.command,
+            type: policy.type,
+            roles: policy.roles,
+            ...(policy.using != null ? { using: policy.using } : {}),
+            ...(policy.check != null ? { check: policy.check } : {}),
+        }));
+        if (table.rlsForced) {
+            meta.rowLevelSecurity = 'force';
+        }
+        else if (table.rlsEnabled) {
+            meta.rowLevelSecurity = true;
+        }
+        else if (meta.policies.length > 0) {
+            // policies staged but RLS disabled — record it explicitly so a reload does not re-enable RLS via the
+            // policies-imply-RLS default
+            meta.rowLevelSecurity = false;
+        }
+    }
     cleanUpReferentialIntegrityRules(metadata) {
         // Clear FK rules that match defaults for:
         // 1. FK-as-PK entities (all PKs are FKs) - cascade for both update and delete

package/README.md

@@ -24,6 +24,7 @@ npm install @mikro-orm/mysql        # MySQL
 npm install @mikro-orm/mariadb      # MariaDB
 npm install @mikro-orm/sqlite       # SQLite
 npm install @mikro-orm/libsql       # libSQL / Turso
+npm install @mikro-orm/sql-js       # sql.js (in-memory SQLite in WASM)
 npm install @mikro-orm/mongodb      # MongoDB
 npm install @mikro-orm/mssql        # MS SQL Server
 npm install @mikro-orm/oracledb     # Oracle

package/SourceFile.d.ts

@@ -35,6 +35,7 @@ export declare class SourceFile {
     protected getEntityDeclOptions(): EntityOptions<unknown>;
     private isDiscriminatorPropertyUserDefined;
     protected getPartitionByDecl(partitionBy: EntityPartitionBy): Dictionary;
+    protected getPolicyDecl(policy: EntityMetadata['policies'][number]): Dictionary;
     protected getEmbeddableDeclOptions(): EmbeddableOptions<unknown>;
     private getCollectionDecl;
     private getPropertyDecorator;

package/SourceFile.js

@@ -1,4 +1,5 @@
 import { Cascade, Config, DecimalType, ReferenceKind, SCALAR_TYPES, UnknownType, Utils, inspect, } from '@mikro-orm/core';
+import { DatabaseTable } from '@mikro-orm/sql';
 import { parse, relative } from 'node:path';
 import { POSSIBLE_TYPE_IMPORTS } from './CoreImportsHelper.js';
 /**
@@ -26,11 +27,13 @@ export class SourceFile {
         if (this.meta.embeddable || this.meta.collection) {
             if (this.meta.embeddable) {
                 const options = this.getEmbeddableDeclOptions();
-                ret += `@${this.referenceDecoratorImport('Embeddable')}(${Utils.hasObjectKeys(options) ? this.serializeObject(options) : ''})\n`;
+                const decl = `@${this.referenceDecoratorImport('Embeddable')}(`;
+                ret += `${decl}${Utils.hasObjectKeys(options) ? this.serializeObject(options, 80 - decl.length, 0) : ''})\n`;
             }
             else {
                 const options = this.getEntityDeclOptions();
-                ret += `@${this.referenceDecoratorImport('Entity')}(${Utils.hasObjectKeys(options) ? this.serializeObject(options) : ''})\n`;
+                const decl = `@${this.referenceDecoratorImport('Entity')}(`;
+                ret += `${decl}${Utils.hasObjectKeys(options) ? this.serializeObject(options, 80 - decl.length, 0) : ''})\n`;
             }
         }
         for (const index of this.meta.indexes) {
@@ -512,6 +515,21 @@ export class SourceFile {
         if (this.meta.partitionBy) {
             options.partitionBy = this.getPartitionByDecl(this.meta.partitionBy);
         }
+        // policies imply RLS on reload, so only emit `rowLevelSecurity` when it adds information:
+        // `'force'` always, plain `true` only for a deny-all table (enabled with no policies),
+        // and explicit `false` only when policies are staged but RLS is disabled
+        if (this.meta.rowLevelSecurity === 'force') {
+            options.rowLevelSecurity = this.quote('force');
+        }
+        else if (this.meta.rowLevelSecurity === true && this.meta.policies.length === 0) {
+            options.rowLevelSecurity = true;
+        }
+        else if (this.meta.rowLevelSecurity === false && this.meta.policies.length > 0) {
+            options.rowLevelSecurity = false;
+        }
+        if (this.meta.policies.length > 0) {
+            options.policies = this.meta.policies.map(policy => this.getPolicyDecl(policy));
+        }
         if (this.meta.readonly && !this.meta.virtual) {
             options.readonly = this.meta.readonly;
         }
@@ -562,6 +580,27 @@ export class SourceFile {
         }
         return result;
     }
+    getPolicyDecl(policy) {
+        // introspected names are always explicit; the rest is emitted only when it differs from the default
+        const result = { name: this.quote(policy.name) };
+        if (policy.command && policy.command !== 'all') {
+            result.command = this.quote(policy.command);
+        }
+        if (policy.type && policy.type !== 'permissive') {
+            result.type = this.quote(policy.type);
+        }
+        const roles = policy.roles;
+        if (roles && !DatabaseTable.isDefaultPolicyRoles(roles)) {
+            result.roles = roles.map(role => this.quote(role));
+        }
+        if (typeof policy.using === 'string') {
+            result.using = this.quote(policy.using);
+        }
+        if (typeof policy.check === 'string') {
+            result.check = this.quote(policy.check);
+        }
+        return result;
+    }
     getEmbeddableDeclOptions() {
         const options = {};
         return this.getCollectionDecl(options, 'discriminator');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mikro-orm/entity-generator",
-  "version": "7.2.0-dev.9",
+  "version": "7.2.1-dev.0",
   "description": "TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Supports MongoDB, MySQL, PostgreSQL and SQLite databases as well as usage with vanilla JavaScript.",
   "keywords": [
     "data-mapper",
@@ -47,13 +47,13 @@
     "copy": "node ../../scripts/copy.mjs"
   },
   "dependencies": {
-    "@mikro-orm/sql": "7.2.0-dev.9"
+    "@mikro-orm/sql": "7.2.1-dev.0"
   },
   "devDependencies": {
-    "@mikro-orm/core": "^7.1.11"
+    "@mikro-orm/core": "^7.2.0"
   },
   "peerDependencies": {
-    "@mikro-orm/core": "7.2.0-dev.9"
+    "@mikro-orm/core": "7.2.1-dev.0"
   },
   "engines": {
     "node": ">= 22.17.0"