@nest-boot/row-level-security 7.0.0

package/dist/decorators/policy.decorator.spec.js

@@ -0,0 +1,498 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const policy_command_enum_1 = require("../enums/policy-command.enum");
+const policy_mode_enum_1 = require("../enums/policy-mode.enum");
+const policy_decorator_1 = require("./policy.decorator");
+describe("Policy decorator", () => {
+    it("stores RLS policy metadata on the entity class", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                name: "workspace_member_user_select_policy",
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                using: `((select app.get_context('user_id', null::bigint)) = "user_id")`,
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyMetadata)(WorkspaceMember)).toEqual([
+            {
+                name: "workspace_member_user_select_policy",
+                mode: policy_mode_enum_1.PolicyMode.PERMISSIVE,
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                using: `((select app.get_context('user_id', null::bigint)) = "user_id")`,
+                roles: [],
+            },
+        ]);
+    });
+    it("keeps multiple policies in declaration order", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                name: "workspace_member_user_select_policy",
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                using: `((select app.get_context('user_id', null::bigint)) = "user_id")`,
+            }),
+            (0, policy_decorator_1.Policy)({
+                name: "tenant_access_policy",
+                command: policy_command_enum_1.PolicyCommand.ALL,
+                using: `((select app.get_context('tenant_id', null::bigint)) = "workspace_id")`,
+                withCheck: `((select app.get_context('tenant_id', null::bigint)) = "workspace_id")`,
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyMetadata)(WorkspaceMember).map((policy) => policy.name)).toEqual(["tenant_access_policy", "workspace_member_user_select_policy"]);
+    });
+    it("stores restrictive policy mode", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                name: "tenant_required_policy",
+                mode: policy_mode_enum_1.PolicyMode.RESTRICTIVE,
+                using: `((select app.get_context('tenant_id', null::bigint)) is not null)`,
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyMetadata)(WorkspaceMember)[0]).toMatchObject({
+            name: "tenant_required_policy",
+            mode: policy_mode_enum_1.PolicyMode.RESTRICTIVE,
+            command: policy_command_enum_1.PolicyCommand.ALL,
+        });
+    });
+    it("generates policy expressions from property and context", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                name: "workspace_member_user_select_policy",
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                property: "user",
+                context: "user_id",
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            properties: {
+                user: {
+                    fieldNames: ["user_id"],
+                    columnTypes: ["integer"],
+                    targetMeta: {
+                        primaryKeys: ["id"],
+                        properties: {
+                            id: {
+                                columnTypes: ["bigint"],
+                            },
+                        },
+                    },
+                },
+            },
+        })).toEqual([
+            {
+                name: "workspace_member_user_select_policy",
+                mode: policy_mode_enum_1.PolicyMode.PERMISSIVE,
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                using: `((select app.get_context('user_id', null::bigint)) = "user_id")`,
+                roles: [],
+            },
+        ]);
+    });
+    it("generates a default policy name from table, property, and command", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                property: "user",
+                context: "user_id",
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            properties: {
+                user: {
+                    fieldNames: ["user_id"],
+                    columnTypes: ["bigint"],
+                },
+            },
+        })).toEqual([
+            {
+                name: "workspace_member_user_select_policy",
+                mode: policy_mode_enum_1.PolicyMode.PERMISSIVE,
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                using: `((select app.get_context('user_id', null::bigint)) = "user_id")`,
+                roles: [],
+            },
+        ]);
+    });
+    it("generates a default policy name without a property", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                using: "true",
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+        })).toEqual([
+            {
+                name: "workspace_member_select_policy",
+                mode: policy_mode_enum_1.PolicyMode.PERMISSIVE,
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                using: "true",
+                roles: [],
+            },
+        ]);
+    });
+    it("uses explicit predicates over generated property context expressions", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                name: "workspace_member_write_policy",
+                property: "workspace",
+                context: "tenant_id",
+                using: "true",
+                withCheck: "false",
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            properties: {
+                workspace: {
+                    fieldNames: ["workspace_id"],
+                    columnTypes: ["bigint"],
+                },
+            },
+        })).toEqual([
+            {
+                name: "workspace_member_write_policy",
+                mode: policy_mode_enum_1.PolicyMode.PERMISSIVE,
+                command: policy_command_enum_1.PolicyCommand.ALL,
+                using: "true",
+                withCheck: "false",
+                roles: [],
+            },
+        ]);
+    });
+    it("sorts roles in generated policy names", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                property: "user",
+                context: "user_id",
+                roles: ["memberRole", "adminRole"],
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            properties: {
+                user: {
+                    fieldNames: ["user_id"],
+                    columnTypes: ["bigint"],
+                },
+            },
+        })[0]).toMatchObject({
+            name: "workspace_member_user_select_admin_role_member_role_policy",
+            roles: ["memberRole", "adminRole"],
+        });
+    });
+    it("generates insert predicates from property and context", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.INSERT,
+                property: "user",
+                context: "user_id",
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            properties: {
+                user: {
+                    fieldNames: ["user_id"],
+                    columnTypes: ["bigint"],
+                },
+            },
+        })).toEqual([
+            {
+                name: "workspace_member_user_insert_policy",
+                mode: policy_mode_enum_1.PolicyMode.PERMISSIVE,
+                command: policy_command_enum_1.PolicyCommand.INSERT,
+                withCheck: `((select app.get_context('user_id', null::bigint)) = "user_id")`,
+                roles: [],
+            },
+        ]);
+    });
+    it("generates all-command predicates from property and context", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                property: "workspace",
+                context: "tenant_id",
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            properties: {
+                workspace: {
+                    fieldNames: ["workspace_id"],
+                    runtimeType: "number",
+                },
+            },
+        })[0]).toMatchObject({
+            name: "workspace_member_workspace_all_policy",
+            using: `((select app.get_context('tenant_id', null::integer)) = "workspace_id")`,
+            withCheck: `((select app.get_context('tenant_id', null::integer)) = "workspace_id")`,
+        });
+    });
+    it.each([
+        ["bigint", "bigint"],
+        ["boolean", "boolean"],
+        ["Date", "timestamp with time zone"],
+        ["text", "text"],
+        ["uuid", "uuid"],
+    ])("maps %s property types to policy context types", (type, postgresType) => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                property: "contextValue",
+                context: "context_value",
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            properties: {
+                contextValue: {
+                    fieldName: "context_value",
+                    type,
+                },
+            },
+        })[0]).toMatchObject({
+            using: `((select app.get_context('context_value', null::${postgresType})) = "context_value")`,
+        });
+    });
+    it("infers target primary key metadata from a primary property marker", () => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                property: "user",
+                context: "user_id",
+            })
+        ], WorkspaceMember);
+        expect((0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            properties: {
+                user: {
+                    fieldNames: ["user_id"],
+                    targetMeta: {
+                        properties: {
+                            id: {
+                                primary: true,
+                                runtimeType: "uuid",
+                            },
+                        },
+                    },
+                },
+            },
+        })[0]).toMatchObject({
+            using: `((select app.get_context('user_id', null::uuid)) = "user_id")`,
+        });
+    });
+    it("rejects an empty policy name when provided", () => {
+        expect(() => (0, policy_decorator_1.Policy)({
+            name: "",
+            using: `((select app.get_context('tenant_id', null::bigint)) = "workspace_id")`,
+        })).toThrow("Policy name is required");
+    });
+    it("rejects a select policy without using", () => {
+        expect(() => (0, policy_decorator_1.Policy)({
+            name: "tenant_access_policy",
+            command: policy_command_enum_1.PolicyCommand.SELECT,
+        })).toThrow("Policy using expression is required");
+    });
+    it("requires property and context to be provided together", () => {
+        expect(() => (0, policy_decorator_1.Policy)({
+            name: "tenant_access_policy",
+            property: "workspace",
+        })).toThrow("Policy property and context must be provided together");
+    });
+    it("rejects a select policy with withCheck", () => {
+        expect(() => (0, policy_decorator_1.Policy)({
+            name: "tenant_access_policy",
+            command: policy_command_enum_1.PolicyCommand.SELECT,
+            using: `((select app.get_context('tenant_id', null::bigint)) = "workspace_id")`,
+            withCheck: `((select app.get_context('tenant_id', null::bigint)) = "workspace_id")`,
+        })).toThrow("Policy withCheck is not allowed for select");
+    });
+    it.each([
+        [
+            "insert policy with using",
+            () => (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.INSERT,
+                using: "true",
+                withCheck: "true",
+            }),
+            "Policy using is not allowed for insert",
+        ],
+        [
+            "insert policy without withCheck",
+            () => (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.INSERT,
+            }),
+            "Policy withCheck expression is required",
+        ],
+        [
+            "all policy without predicates",
+            () => (0, policy_decorator_1.Policy)({
+                name: "workspace_member_all_policy",
+            }),
+            "Policy using or withCheck expression is required",
+        ],
+    ])("rejects %s", (_name, createPolicy, message) => {
+        expect(createPolicy).toThrow(message);
+    });
+    it.each([
+        [
+            "missing property metadata",
+            {
+                properties: {},
+            },
+            `Policy property "user" was not found on entity WorkspaceMember`,
+        ],
+        [
+            "multiple column names",
+            {
+                properties: {
+                    user: {
+                        fieldNames: ["user_id", "tenant_id"],
+                        columnTypes: ["bigint"],
+                    },
+                },
+            },
+            `Policy property "user" on entity WorkspaceMember must resolve to exactly one database column`,
+        ],
+        [
+            "target with multiple primary keys",
+            {
+                properties: {
+                    user: {
+                        fieldNames: ["user_id"],
+                        targetMeta: {
+                            primaryKeys: ["id", "tenantId"],
+                            properties: {
+                                id: {
+                                    columnTypes: ["bigint"],
+                                },
+                                tenantId: {
+                                    columnTypes: ["bigint"],
+                                },
+                            },
+                        },
+                    },
+                },
+            },
+            `Policy property "user" on entity WorkspaceMember must target an entity with exactly one primary key`,
+        ],
+        [
+            "target without primary key metadata",
+            {
+                properties: {
+                    user: {
+                        fieldNames: ["user_id"],
+                        targetMeta: {
+                            primaryKeys: ["id"],
+                            properties: {},
+                        },
+                    },
+                },
+            },
+            `Policy property "user" on entity WorkspaceMember must expose target primary key metadata`,
+        ],
+        [
+            "multiple column types",
+            {
+                properties: {
+                    user: {
+                        fieldNames: ["user_id"],
+                        columnTypes: ["bigint", "uuid"],
+                    },
+                },
+            },
+            `Policy property "user" on entity WorkspaceMember must resolve to exactly one database column type`,
+        ],
+        [
+            "unsupported database column type",
+            {
+                properties: {
+                    user: {
+                        fieldNames: ["user_id"],
+                        columnTypes: ["bigint; drop table users"],
+                    },
+                },
+            },
+            `Policy property "user" on entity WorkspaceMember has an unsupported database column type: bigint; drop table users`,
+        ],
+        [
+            "missing database column type",
+            {
+                properties: {
+                    user: {
+                        fieldNames: ["user_id"],
+                        type: "unknown",
+                    },
+                },
+            },
+            `Policy property "user" on entity WorkspaceMember must expose a database column type`,
+        ],
+    ])("rejects generated policy for %s", (_name, metadata, message) => {
+        let WorkspaceMember = class WorkspaceMember {
+        };
+        WorkspaceMember = __decorate([
+            (0, policy_decorator_1.Policy)({
+                command: policy_command_enum_1.PolicyCommand.SELECT,
+                property: "user",
+                context: "user_id",
+            })
+        ], WorkspaceMember);
+        expect(() => (0, policy_decorator_1.getPolicyDefinitions)(WorkspaceMember, {
+            entityName: "WorkspaceMember",
+            schemaName: "public",
+            tableName: "workspace_member",
+            ...metadata,
+        })).toThrow(message);
+    });
+});
+//# sourceMappingURL=policy.decorator.spec.js.map

package/dist/decorators/policy.decorator.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.decorator.spec.js","sourceRoot":"","sources":["../../src/decorators/policy.decorator.spec.ts"],"names":[],"mappings":";;;;;;;;AAAA,sEAA6D;AAC7D,gEAAuD;AACvD,yDAI4B;AAE5B,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QAMxD,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YALpB,IAAA,yBAAM,EAAC;gBACN,IAAI,EAAE,qCAAqC;gBAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,iEAAiE;aACzE,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CAAC,IAAA,oCAAiB,EAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;YACjD;gBACE,IAAI,EAAE,qCAAqC;gBAC3C,IAAI,EAAE,6BAAU,CAAC,UAAU;gBAC3B,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,iEAAiE;gBACxE,KAAK,EAAE,EAAE;aACV;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QAYtD,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YAXpB,IAAA,yBAAM,EAAC;gBACN,IAAI,EAAE,qCAAqC;gBAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,iEAAiE;aACzE,CAAC;YACD,IAAA,yBAAM,EAAC;gBACN,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,mCAAa,CAAC,GAAG;gBAC1B,KAAK,EAAE,wEAAwE;gBAC/E,SAAS,EAAE,wEAAwE;aACpF,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,oCAAiB,EAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CAAC,OAAO,CAAC,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAMxC,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YALpB,IAAA,yBAAM,EAAC;gBACN,IAAI,EAAE,wBAAwB;gBAC9B,IAAI,EAAE,6BAAU,CAAC,WAAW;gBAC5B,KAAK,EAAE,mEAAmE;aAC3E,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CAAC,IAAA,oCAAiB,EAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC1D,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,6BAAU,CAAC,WAAW;YAC5B,OAAO,EAAE,mCAAa,CAAC,GAAG;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAOhE,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YANpB,IAAA,yBAAM,EAAC;gBACN,IAAI,EAAE,qCAAqC;gBAC3C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS;aACnB,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;oBACvB,WAAW,EAAE,CAAC,SAAS,CAAC;oBACxB,UAAU,EAAE;wBACV,WAAW,EAAE,CAAC,IAAI,CAAC;wBACnB,UAAU,EAAE;4BACV,EAAE,EAAE;gCACF,WAAW,EAAE,CAAC,QAAQ,CAAC;6BACxB;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CACH,CAAC,OAAO,CAAC;YACR;gBACE,IAAI,EAAE,qCAAqC;gBAC3C,IAAI,EAAE,6BAAU,CAAC,UAAU;gBAC3B,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,iEAAiE;gBACxE,KAAK,EAAE,EAAE;aACV;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAM3E,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YALpB,IAAA,yBAAM,EAAC;gBACN,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS;aACnB,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;oBACvB,WAAW,EAAE,CAAC,QAAQ,CAAC;iBACxB;aACF;SACF,CAAC,CACH,CAAC,OAAO,CAAC;YACR;gBACE,IAAI,EAAE,qCAAqC;gBAC3C,IAAI,EAAE,6BAAU,CAAC,UAAU;gBAC3B,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,iEAAiE;gBACxE,KAAK,EAAE,EAAE;aACV;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAK5D,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YAJpB,IAAA,yBAAM,EAAC;gBACN,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;aACd,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;SAC9B,CAAC,CACH,CAAC,OAAO,CAAC;YACR;gBACE,IAAI,EAAE,gCAAgC;gBACtC,IAAI,EAAE,6BAAU,CAAC,UAAU;gBAC3B,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,EAAE;aACV;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAQ9E,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YAPpB,IAAA,yBAAM,EAAC;gBACN,IAAI,EAAE,+BAA+B;gBACrC,QAAQ,EAAE,WAAW;gBACrB,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,OAAO;aACnB,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,UAAU,EAAE,CAAC,cAAc,CAAC;oBAC5B,WAAW,EAAE,CAAC,QAAQ,CAAC;iBACxB;aACF;SACF,CAAC,CACH,CAAC,OAAO,CAAC;YACR;gBACE,IAAI,EAAE,+BAA+B;gBACrC,IAAI,EAAE,6BAAU,CAAC,UAAU;gBAC3B,OAAO,EAAE,mCAAa,CAAC,GAAG;gBAC1B,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,OAAO;gBAClB,KAAK,EAAE,EAAE;aACV;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAO/C,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YANpB,IAAA,yBAAM,EAAC;gBACN,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS;gBAClB,KAAK,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;aACnC,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;oBACvB,WAAW,EAAE,CAAC,QAAQ,CAAC;iBACxB;aACF;SACF,CAAC,CAAC,CAAC,CAAC,CACN,CAAC,aAAa,CAAC;YACd,IAAI,EAAE,4DAA4D;YAClE,KAAK,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAM/D,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YALpB,IAAA,yBAAM,EAAC;gBACN,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS;aACnB,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;oBACvB,WAAW,EAAE,CAAC,QAAQ,CAAC;iBACxB;aACF;SACF,CAAC,CACH,CAAC,OAAO,CAAC;YACR;gBACE,IAAI,EAAE,qCAAqC;gBAC3C,IAAI,EAAE,6BAAU,CAAC,UAAU;gBAC3B,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,SAAS,EAAE,iEAAiE;gBAC5E,KAAK,EAAE,EAAE;aACV;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAKpE,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YAJpB,IAAA,yBAAM,EAAC;gBACN,QAAQ,EAAE,WAAW;gBACrB,OAAO,EAAE,WAAW;aACrB,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE;gBACV,SAAS,EAAE;oBACT,UAAU,EAAE,CAAC,cAAc,CAAC;oBAC5B,WAAW,EAAE,QAAQ;iBACtB;aACF;SACF,CAAC,CAAC,CAAC,CAAC,CACN,CAAC,aAAa,CAAC;YACd,IAAI,EAAE,uCAAuC;YAC7C,KAAK,EAAE,yEAAyE;YAChF,SAAS,EAAE,yEAAyE;SACrF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpB,CAAC,SAAS,EAAE,SAAS,CAAC;QACtB,CAAC,MAAM,EAAE,0BAA0B,CAAC;QACpC,CAAC,MAAM,EAAE,MAAM,CAAC;QAChB,CAAC,MAAM,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC,gDAAgD,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE;QAM1E,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YALpB,IAAA,yBAAM,EAAC;gBACN,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,eAAe;aACzB,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE;gBACV,YAAY,EAAE;oBACZ,SAAS,EAAE,eAAe;oBAC1B,IAAI;iBACL;aACF;SACF,CAAC,CAAC,CAAC,CAAC,CACN,CAAC,aAAa,CAAC;YACd,KAAK,EAAE,mDAAmD,YAAY,uBAAuB;SAC9F,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAM3E,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YALpB,IAAA,yBAAM,EAAC;gBACN,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS;aACnB,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CACJ,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;oBACvB,UAAU,EAAE;wBACV,UAAU,EAAE;4BACV,EAAE,EAAE;gCACF,OAAO,EAAE,IAAI;gCACb,WAAW,EAAE,MAAM;6BACpB;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC,CAAC,CAAC,CACN,CAAC,aAAa,CAAC;YACd,KAAK,EAAE,+DAA+D;SACvE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CACV,IAAA,yBAAM,EAAC;YACL,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,wEAAwE;SAChF,CAAC,CACH,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,EAAE,CACV,IAAA,yBAAM,EAAC;YACL,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,mCAAa,CAAC,MAAM;SAC9B,CAAC,CACH,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,EAAE,CACV,IAAA,yBAAM,EAAC;YACL,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,WAAW;SACtB,CAAC,CACH,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,EAAE,CACV,IAAA,yBAAM,EAAC;YACL,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,KAAK,EAAE,wEAAwE;YAC/E,SAAS,EAAE,wEAAwE;SACpF,CAAC,CACH,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN;YACE,0BAA0B;YAC1B,GAAG,EAAE,CACH,IAAA,yBAAM,EAAC;gBACL,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,MAAM;aAClB,CAAC;YACJ,wCAAwC;SACzC;QACD;YACE,iCAAiC;YACjC,GAAG,EAAE,CACH,IAAA,yBAAM,EAAC;gBACL,OAAO,EAAE,mCAAa,CAAC,MAAM;aAC9B,CAAC;YACJ,yCAAyC;SAC1C;QACD;YACE,+BAA+B;YAC/B,GAAG,EAAE,CACH,IAAA,yBAAM,EAAC;gBACL,IAAI,EAAE,6BAA6B;aACpC,CAAC;YACJ,kDAAkD;SACnD;KACF,CAAC,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE;QAChD,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN;YACE,2BAA2B;YAC3B;gBACE,UAAU,EAAE,EAAE;aACf;YACD,gEAAgE;SACjE;QACD;YACE,uBAAuB;YACvB;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;wBACpC,WAAW,EAAE,CAAC,QAAQ,CAAC;qBACxB;iBACF;aACF;YACD,8FAA8F;SAC/F;QACD;YACE,mCAAmC;YACnC;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,UAAU,EAAE;4BACV,WAAW,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC;4BAC/B,UAAU,EAAE;gCACV,EAAE,EAAE;oCACF,WAAW,EAAE,CAAC,QAAQ,CAAC;iCACxB;gCACD,QAAQ,EAAE;oCACR,WAAW,EAAE,CAAC,QAAQ,CAAC;iCACxB;6BACF;yBACF;qBACF;iBACF;aACF;YACD,qGAAqG;SACtG;QACD;YACE,qCAAqC;YACrC;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,UAAU,EAAE;4BACV,WAAW,EAAE,CAAC,IAAI,CAAC;4BACnB,UAAU,EAAE,EAAE;yBACf;qBACF;iBACF;aACF;YACD,0FAA0F;SAC3F;QACD;YACE,uBAAuB;YACvB;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;qBAChC;iBACF;aACF;YACD,mGAAmG;SACpG;QACD;YACE,kCAAkC;YAClC;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,WAAW,EAAE,CAAC,0BAA0B,CAAC;qBAC1C;iBACF;aACF;YACD,oHAAoH;SACrH;QACD;YACE,8BAA8B;YAC9B;gBACE,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,UAAU,EAAE,CAAC,SAAS,CAAC;wBACvB,IAAI,EAAE,SAAS;qBAChB;iBACF;aACF;YACD,qFAAqF;SACtF;KACF,CAAC,CAAC,iCAAiC,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QAMjE,IAAM,eAAe,GAArB,MAAM,eAAe;SAAG,CAAA;QAAlB,eAAe;YALpB,IAAA,yBAAM,EAAC;gBACN,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS;aACnB,CAAC;WACI,eAAe,CAAG;QAExB,MAAM,CAAC,GAAG,EAAE,CACV,IAAA,uCAAoB,EAAC,eAAe,EAAE;YACpC,UAAU,EAAE,iBAAiB;YAC7B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,GAAG,QAAQ;SACZ,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/enums/policy-command.enum.d.ts

@@ -0,0 +1,13 @@
+/** PostgreSQL row-level security policy command targets. */
+export declare enum PolicyCommand {
+    /** Applies the policy to all supported commands. */
+    ALL = "all",
+    /** Applies the policy to SELECT statements. */
+    SELECT = "select",
+    /** Applies the policy to INSERT statements. */
+    INSERT = "insert",
+    /** Applies the policy to UPDATE statements. */
+    UPDATE = "update",
+    /** Applies the policy to DELETE statements. */
+    DELETE = "delete"
+}

package/dist/enums/policy-command.enum.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyCommand = void 0;
+/** PostgreSQL row-level security policy command targets. */
+var PolicyCommand;
+(function (PolicyCommand) {
+    /** Applies the policy to all supported commands. */
+    PolicyCommand["ALL"] = "all";
+    /** Applies the policy to SELECT statements. */
+    PolicyCommand["SELECT"] = "select";
+    /** Applies the policy to INSERT statements. */
+    PolicyCommand["INSERT"] = "insert";
+    /** Applies the policy to UPDATE statements. */
+    PolicyCommand["UPDATE"] = "update";
+    /** Applies the policy to DELETE statements. */
+    PolicyCommand["DELETE"] = "delete";
+})(PolicyCommand || (exports.PolicyCommand = PolicyCommand = {}));
+//# sourceMappingURL=policy-command.enum.js.map

package/dist/enums/policy-command.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-command.enum.js","sourceRoot":"","sources":["../../src/enums/policy-command.enum.ts"],"names":[],"mappings":";;;AAAA,4DAA4D;AAC5D,IAAY,aAWX;AAXD,WAAY,aAAa;IACvB,oDAAoD;IACpD,4BAAW,CAAA;IACX,+CAA+C;IAC/C,kCAAiB,CAAA;IACjB,+CAA+C;IAC/C,kCAAiB,CAAA;IACjB,+CAA+C;IAC/C,kCAAiB,CAAA;IACjB,+CAA+C;IAC/C,kCAAiB,CAAA;AACnB,CAAC,EAXW,aAAa,6BAAb,aAAa,QAWxB"}

package/dist/enums/policy-mode.enum.d.ts

@@ -0,0 +1,7 @@
+/** PostgreSQL policy combination mode. */
+export declare enum PolicyMode {
+    /** Allows access when any permissive policy grants it. */
+    PERMISSIVE = "permissive",
+    /** Requires this policy to pass in addition to permissive policies. */
+    RESTRICTIVE = "restrictive"
+}

package/dist/enums/policy-mode.enum.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyMode = void 0;
+/** PostgreSQL policy combination mode. */
+var PolicyMode;
+(function (PolicyMode) {
+    /** Allows access when any permissive policy grants it. */
+    PolicyMode["PERMISSIVE"] = "permissive";
+    /** Requires this policy to pass in addition to permissive policies. */
+    PolicyMode["RESTRICTIVE"] = "restrictive";
+})(PolicyMode || (exports.PolicyMode = PolicyMode = {}));
+//# sourceMappingURL=policy-mode.enum.js.map

package/dist/enums/policy-mode.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-mode.enum.js","sourceRoot":"","sources":["../../src/enums/policy-mode.enum.ts"],"names":[],"mappings":";;;AAAA,0CAA0C;AAC1C,IAAY,UAKX;AALD,WAAY,UAAU;IACpB,0DAA0D;IAC1D,uCAAyB,CAAA;IACzB,uEAAuE;IACvE,yCAA2B,CAAA;AAC7B,CAAC,EALW,UAAU,0BAAV,UAAU,QAKrB"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export * from "./decorators/policy.decorator";
+export * from "./enums/policy-command.enum";
+export * from "./enums/policy-mode.enum";
+export * from "./interfaces";
+export * from "./row-level-security-context";
+export * from "./row-level-security-entity-manager";
+export * from "./row-level-security-migration";
+export * from "./row-level-security-migration-generator";
+export * from "./utils";

package/dist/index.js

@@ -0,0 +1,26 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./decorators/policy.decorator"), exports);
+__exportStar(require("./enums/policy-command.enum"), exports);
+__exportStar(require("./enums/policy-mode.enum"), exports);
+__exportStar(require("./interfaces"), exports);
+__exportStar(require("./row-level-security-context"), exports);
+__exportStar(require("./row-level-security-entity-manager"), exports);
+__exportStar(require("./row-level-security-migration"), exports);
+__exportStar(require("./row-level-security-migration-generator"), exports);
+__exportStar(require("./utils"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gEAA8C;AAC9C,8DAA4C;AAC5C,2DAAyC;AACzC,+CAA6B;AAC7B,+DAA6C;AAC7C,sEAAoD;AACpD,iEAA+C;AAC/C,2EAAyD;AACzD,0CAAwB"}

package/dist/index.spec.d.ts

@@ -0,0 +1 @@
+export {};