@nest-boot/row-level-security 7.3.1 → 8.0.0-beta.0

package/dist/utils/normalize-postgres-type-alias.spec.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/utils/normalize-postgres-type-alias.spec.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const normalize_postgres_type_alias_util_1 = require("./normalize-postgres-type-alias.util");
-describe("normalizePostgresTypeAlias", () => {
-    it.each([
-        ["bool", "boolean"],
-        ["bpchar", "character"],
-        ["char", "character"],
-        ["decimal", "numeric"],
-        ["float4", "real"],
-        ["float8", "double precision"],
-        ["int", "integer"],
-        ["int4", "integer"],
-        ["int2", "smallint"],
-        ["int8", "bigint"],
-        ["timetz", "time with time zone"],
-        ["timestamptz", "timestamp with time zone"],
-        ["varbit", "bit varying"],
-        ["varchar", "character varying"],
-        ["varchar(255)", "character varying"],
-    ])("normalizes %s to %s", (type, normalizedType) => {
-        expect((0, normalize_postgres_type_alias_util_1.normalizePostgresTypeAlias)(type)).toBe(normalizedType);
-    });
-    it("preserves canonical PostgreSQL types", () => {
-        expect((0, normalize_postgres_type_alias_util_1.normalizePostgresTypeAlias)("uuid")).toBe("uuid");
-    });
-});
-//# sourceMappingURL=normalize-postgres-type-alias.spec.js.map

package/dist/utils/normalize-postgres-type-alias.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"normalize-postgres-type-alias.spec.js","sourceRoot":"","sources":["../../src/utils/normalize-postgres-type-alias.spec.ts"],"names":[],"mappings":";;AAAA,6FAAkF;AAElF,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,MAAM,EAAE,SAAS,CAAC;QACnB,CAAC,QAAQ,EAAE,WAAW,CAAC;QACvB,CAAC,MAAM,EAAE,WAAW,CAAC;QACrB,CAAC,SAAS,EAAE,SAAS,CAAC;QACtB,CAAC,QAAQ,EAAE,MAAM,CAAC;QAClB,CAAC,QAAQ,EAAE,kBAAkB,CAAC;QAC9B,CAAC,KAAK,EAAE,SAAS,CAAC;QAClB,CAAC,MAAM,EAAE,SAAS,CAAC;QACnB,CAAC,MAAM,EAAE,UAAU,CAAC;QACpB,CAAC,MAAM,EAAE,QAAQ,CAAC;QAClB,CAAC,QAAQ,EAAE,qBAAqB,CAAC;QACjC,CAAC,aAAa,EAAE,0BAA0B,CAAC;QAC3C,CAAC,QAAQ,EAAE,aAAa,CAAC;QACzB,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAChC,CAAC,cAAc,EAAE,mBAAmB,CAAC;KACtC,CAAC,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE;QACjD,MAAM,CAAC,IAAA,+DAA0B,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,IAAA,+DAA0B,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/policy-migration-sql.spec.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/utils/policy-migration-sql.spec.js

@@ -1,273 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const policy_command_enum_1 = require("../enums/policy-command.enum");
-const policy_mode_enum_1 = require("../enums/policy-mode.enum");
-const create_policy_bootstrap_sql_statements_1 = require("./create-policy-bootstrap-sql-statements");
-const create_policy_down_sql_1 = require("./create-policy-down-sql");
-const create_policy_privilege_down_sql_statements_1 = require("./create-policy-privilege-down-sql-statements");
-const create_policy_role_sql_statements_1 = require("./create-policy-role-sql-statements");
-const create_policy_up_sql_statements_1 = require("./create-policy-up-sql-statements");
-describe("policy migration SQL", () => {
-    it("generates row level security bootstrap SQL", () => {
-        const statements = (0, create_policy_bootstrap_sql_statements_1.createPolicyBootstrapSqlStatements)();
-        expect(statements).toEqual([]);
-        expect(statements.join("\n")).not.toContain("grant all on all tables");
-        expect(statements.join("\n")).not.toContain("get_context");
-    });
-    it("does not generate role bootstrap SQL for anonymous and custom policy roles", () => {
-        const statements = (0, create_policy_role_sql_statements_1.createPolicyRoleUpSqlStatements)([
-            "authenticated",
-            "workspace_admin",
-        ]);
-        expect(statements).toEqual([]);
-        expect(statements.join("\n")).not.toContain("create role");
-        expect(statements.join("\n")).not.toContain("current_user");
-        expect(statements.join("\n")).not.toContain("grant usage on schema app");
-    });
-    it("does not generate role down SQL", () => {
-        const statements = (0, create_policy_role_sql_statements_1.createPolicyRoleDownSqlStatements)(["workspace_admin"]);
-        expect(statements).toEqual([]);
-        expect((0, create_policy_role_sql_statements_1.createPolicyRoleDownSqlStatements)()).toEqual([]);
-        expect(statements.join("\n")).not.toContain("drop role");
-        expect(statements.join("\n")).not.toContain("current_user");
-        expect(statements.join("\n")).not.toContain("revoke usage on schema app");
-    });
-    it("generates role down SQL for an explicit anonymous role", () => {
-        const statements = (0, create_policy_role_sql_statements_1.createPolicyRoleDownSqlStatements)(["anonymous"]);
-        expect(statements).toEqual([]);
-    });
-    it("normalizes policy role names with anonymous first and public skipped", () => {
-        expect((0, create_policy_role_sql_statements_1.getPolicyRoleNames)()).toEqual(["anonymous"]);
-        expect((0, create_policy_role_sql_statements_1.getPolicyRoleNames)([
-            "workspace_admin",
-            "public",
-            "authenticated",
-            "workspace_admin",
-        ])).toEqual(["anonymous", "authenticated", "workspace_admin"]);
-    });
-    it("generates policy up SQL", () => {
-        const statements = (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_user_select_policy",
-            command: policy_command_enum_1.PolicyCommand.SELECT,
-            using: `((select current_setting('app.user_id', true)::bigint) = "user_id")`,
-        });
-        expect(statements).toEqual([
-            'alter table "public"."workspace_member" enable row level security;',
-            'drop policy if exists workspace_member_user_select_policy on "public"."workspace_member";',
-            'create policy workspace_member_user_select_policy on "public"."workspace_member" as permissive for select using ((select current_setting(\'app.user_id\', true)::bigint) = "user_id");',
-        ]);
-    });
-    it("generates policy SQL for explicit roles", () => {
-        const statements = (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_user_select_policy",
-            command: policy_command_enum_1.PolicyCommand.SELECT,
-            using: `((select current_setting('app.user_id', true)::bigint) = "user_id")`,
-            roles: ["authenticated", "anonymous"],
-        });
-        expect(statements[2]).toBe('drop policy if exists workspace_member_user_select_policy on "public"."workspace_member";');
-    });
-    it("wraps raw using predicates in parentheses", () => {
-        const statements = (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)({
-            schemaName: "public",
-            tableName: "user",
-            policyName: "user_select_authenticated_policy",
-            command: policy_command_enum_1.PolicyCommand.SELECT,
-            using: "true",
-            roles: ["authenticated"],
-        });
-        expect(statements).toContain('create policy user_select_authenticated_policy on "public"."user" as permissive for select to authenticated using (true);');
-    });
-    it("generates table grants for explicit policy roles", () => {
-        const statements = (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_user_select_policy",
-            command: policy_command_enum_1.PolicyCommand.SELECT,
-            using: `((select current_setting('app.user_id', true)::bigint) = "user_id")`,
-            roles: ["authenticated", "anonymous"],
-        });
-        expect(statements).toEqual([
-            'alter table "public"."workspace_member" enable row level security;',
-            'grant select on table "public"."workspace_member" to authenticated, anonymous;',
-            'drop policy if exists workspace_member_user_select_policy on "public"."workspace_member";',
-            'create policy workspace_member_user_select_policy on "public"."workspace_member" as permissive for select to authenticated, anonymous using ((select current_setting(\'app.user_id\', true)::bigint) = "user_id");',
-        ]);
-    });
-    it("generates sequence grants for explicit insert policy roles", () => {
-        const statements = (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_insert_policy",
-            command: policy_command_enum_1.PolicyCommand.INSERT,
-            withCheck: "true",
-            roles: ["authenticated"],
-        });
-        expect(statements).toContain('grant insert on table "public"."workspace_member" to authenticated;');
-        expect(statements).toEqual(expect.arrayContaining([
-            expect.stringContaining("pg_get_serial_sequence"),
-            expect.stringContaining("grant usage, select on sequence %s to authenticated"),
-        ]));
-    });
-    it.each([
-        [policy_command_enum_1.PolicyCommand.SELECT, "revoke select on table"],
-        [policy_command_enum_1.PolicyCommand.INSERT, "revoke insert on table"],
-        [policy_command_enum_1.PolicyCommand.UPDATE, "revoke select, update on table"],
-        [policy_command_enum_1.PolicyCommand.DELETE, "revoke select, delete on table"],
-        [policy_command_enum_1.PolicyCommand.ALL, "revoke select, insert, update, delete on table"],
-    ])("generates policy privilege revoke SQL for %s", (command, expected) => {
-        const statements = (0, create_policy_privilege_down_sql_statements_1.createPolicyPrivilegeDownSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_policy",
-            command,
-            roles: ["authenticated"],
-        });
-        expect(statements[0]).toContain(expected);
-        if (command === policy_command_enum_1.PolicyCommand.INSERT || command === policy_command_enum_1.PolicyCommand.ALL) {
-            expect(statements).toEqual(expect.arrayContaining([
-                expect.stringContaining("revoke usage, select on sequence %s from authenticated"),
-            ]));
-        }
-        else {
-            expect(statements).toHaveLength(1);
-        }
-    });
-    it("does not generate policy privilege revoke SQL without explicit roles", () => {
-        expect((0, create_policy_privilege_down_sql_statements_1.createPolicyPrivilegeDownSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_policy",
-        })).toEqual([]);
-    });
-    it("defaults policy privilege revoke SQL to all command privileges", () => {
-        expect((0, create_policy_privilege_down_sql_statements_1.createPolicyPrivilegeDownSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_policy",
-            roles: ["authenticated"],
-        })).toEqual(expect.arrayContaining([
-            expect.stringContaining('revoke select, insert, update, delete on table "public"."workspace_member" from authenticated;'),
-            expect.stringContaining("revoke usage, select on sequence %s from authenticated"),
-        ]));
-    });
-    it("keeps policy privilege grants required by preserved policies", () => {
-        const statements = (0, create_policy_privilege_down_sql_statements_1.createPolicyPrivilegeDownSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_all_policy",
-            command: policy_command_enum_1.PolicyCommand.ALL,
-            roles: ["authenticated", "workspace_admin"],
-        }, [
-            {
-                schemaName: "public",
-                tableName: "workspace_member",
-                policyName: "workspace_member_insert_policy",
-                command: policy_command_enum_1.PolicyCommand.INSERT,
-                withCheck: "true",
-                roles: ["authenticated"],
-            },
-        ]);
-        expect(statements).toEqual(expect.arrayContaining([
-            'revoke select, update, delete on table "public"."workspace_member" from authenticated;',
-            'revoke select, insert, update, delete on table "public"."workspace_member" from workspace_admin;',
-        ]));
-        expect(statements).toEqual(expect.arrayContaining([
-            expect.stringContaining("revoke usage, select on sequence %s from workspace_admin"),
-        ]));
-        expect(statements).toEqual(expect.not.arrayContaining([
-            expect.stringContaining("revoke usage, select on sequence %s from authenticated"),
-        ]));
-    });
-    it("generates restrictive policy SQL", () => {
-        const statements = (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "tenant_required_policy",
-            mode: policy_mode_enum_1.PolicyMode.RESTRICTIVE,
-            using: `((select current_setting('app.tenant_id', true)::bigint) is not null)`,
-        });
-        expect(statements[2]).toBe('create policy tenant_required_policy on "public"."workspace_member" as restrictive for all using ((select current_setting(\'app.tenant_id\', true)::bigint) is not null);');
-    });
-    it("generates insert policy SQL with only a with check predicate", () => {
-        const statements = (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_insert_policy",
-            command: policy_command_enum_1.PolicyCommand.INSERT,
-            withCheck: ` true `,
-        });
-        expect(statements[2]).toBe('create policy workspace_member_insert_policy on "public"."workspace_member" as permissive for insert with check (true);');
-    });
-    it.each([
-        [
-            "select without using",
-            {
-                schemaName: "public",
-                tableName: "workspace_member",
-                policyName: "workspace_member_select_policy",
-                command: policy_command_enum_1.PolicyCommand.SELECT,
-            },
-            "Policy using expression is required",
-        ],
-        [
-            "delete with withCheck",
-            {
-                schemaName: "public",
-                tableName: "workspace_member",
-                policyName: "workspace_member_delete_policy",
-                command: policy_command_enum_1.PolicyCommand.DELETE,
-                using: "true",
-                withCheck: "true",
-            },
-            "Policy withCheck is not allowed for delete",
-        ],
-        [
-            "insert with using",
-            {
-                schemaName: "public",
-                tableName: "workspace_member",
-                policyName: "workspace_member_insert_policy",
-                command: policy_command_enum_1.PolicyCommand.INSERT,
-                using: "true",
-                withCheck: "true",
-            },
-            "Policy using is not allowed for insert",
-        ],
-        [
-            "insert without withCheck",
-            {
-                schemaName: "public",
-                tableName: "workspace_member",
-                policyName: "workspace_member_insert_policy",
-                command: policy_command_enum_1.PolicyCommand.INSERT,
-            },
-            "Policy withCheck expression is required",
-        ],
-        [
-            "all without predicates",
-            {
-                schemaName: "public",
-                tableName: "workspace_member",
-                policyName: "workspace_member_all_policy",
-            },
-            "Policy using or withCheck expression is required",
-        ],
-    ])("rejects %s", (_name, options, message) => {
-        expect(() => (0, create_policy_up_sql_statements_1.createPolicyUpSqlStatements)(options)).toThrow(message);
-    });
-    it("generates guarded policy down SQL", () => {
-        const sql = (0, create_policy_down_sql_1.createPolicyDownSql)({
-            schemaName: "public",
-            tableName: "workspace_member",
-            policyName: "workspace_member_user_select_policy",
-        });
-        expect(sql).toContain('to_regclass(\'"public"."workspace_member"\')');
-        expect(sql).toContain('drop policy if exists workspace_member_user_select_policy on "public"."workspace_member"');
-        expect(sql).toContain("disable row level security");
-    });
-});
-//# sourceMappingURL=policy-migration-sql.spec.js.map

package/dist/utils/policy-migration-sql.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-migration-sql.spec.js","sourceRoot":"","sources":["../../src/utils/policy-migration-sql.spec.ts"],"names":[],"mappings":";;AAAA,sEAA6D;AAC7D,gEAAuD;AACvD,qGAA8F;AAC9F,qEAA+D;AAC/D,+GAAuG;AACvG,2FAI6C;AAC7C,uFAAgF;AAEhF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,UAAU,GAAG,IAAA,2EAAkC,GAAE,CAAC;QAExD,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACvE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,UAAU,GAAG,IAAA,mEAA+B,EAAC;YACjD,eAAe;YACf,iBAAiB;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,UAAU,GAAG,IAAA,qEAAiC,EAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAE1E,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAA,qEAAiC,GAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,UAAU,GAAG,IAAA,qEAAiC,EAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAEpE,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,IAAA,sDAAkB,GAAE,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACpD,MAAM,CACJ,IAAA,sDAAkB,EAAC;YACjB,iBAAiB;YACjB,QAAQ;YACR,eAAe;YACf,iBAAiB;SAClB,CAAC,CACH,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,UAAU,GAAG,IAAA,6DAA2B,EAAC;YAC7C,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,qCAAqC;YACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,KAAK,EAAE,qEAAqE;SAC7E,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;YACzB,oEAAoE;YACpE,2FAA2F;YAC3F,wLAAwL;SACzL,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,UAAU,GAAG,IAAA,6DAA2B,EAAC;YAC7C,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,qCAAqC;YACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,KAAK,EAAE,qEAAqE;YAC5E,KAAK,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACxB,2FAA2F,CAC5F,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,UAAU,GAAG,IAAA,6DAA2B,EAAC;YAC7C,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,kCAAkC;YAC9C,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,CAAC,eAAe,CAAC;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAC1B,2HAA2H,CAC5H,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAA,6DAA2B,EAAC;YAC7C,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,qCAAqC;YACjD,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,KAAK,EAAE,qEAAqE;YAC5E,KAAK,EAAE,CAAC,eAAe,EAAE,WAAW,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;YACzB,oEAAoE;YACpE,gFAAgF;YAChF,2FAA2F;YAC3F,oNAAoN;SACrN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,UAAU,GAAG,IAAA,6DAA2B,EAAC;YAC7C,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,gCAAgC;YAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,CAAC,eAAe,CAAC;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAC1B,qEAAqE,CACtE,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CACxB,MAAM,CAAC,eAAe,CAAC;YACrB,MAAM,CAAC,gBAAgB,CAAC,wBAAwB,CAAC;YACjD,MAAM,CAAC,gBAAgB,CACrB,qDAAqD,CACtD;SACF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,mCAAa,CAAC,MAAM,EAAE,wBAAwB,CAAC;QAChD,CAAC,mCAAa,CAAC,MAAM,EAAE,wBAAwB,CAAC;QAChD,CAAC,mCAAa,CAAC,MAAM,EAAE,gCAAgC,CAAC;QACxD,CAAC,mCAAa,CAAC,MAAM,EAAE,gCAAgC,CAAC;QACxD,CAAC,mCAAa,CAAC,GAAG,EAAE,gDAAgD,CAAC;KACtE,CAAC,CAAC,8CAA8C,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACvE,MAAM,UAAU,GAAG,IAAA,oFAAsC,EAAC;YACxD,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,yBAAyB;YACrC,OAAO;YACP,KAAK,EAAE,CAAC,eAAe,CAAC;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE1C,IAAI,OAAO,KAAK,mCAAa,CAAC,MAAM,IAAI,OAAO,KAAK,mCAAa,CAAC,GAAG,EAAE,CAAC;YACtE,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CACxB,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CACrB,wDAAwD,CACzD;aACF,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CACJ,IAAA,oFAAsC,EAAC;YACrC,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,yBAAyB;SACtC,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CACJ,IAAA,oFAAsC,EAAC;YACrC,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,yBAAyB;YACrC,KAAK,EAAE,CAAC,eAAe,CAAC;SACzB,CAAC,CACH,CAAC,OAAO,CACP,MAAM,CAAC,eAAe,CAAC;YACrB,MAAM,CAAC,gBAAgB,CACrB,gGAAgG,CACjG;YACD,MAAM,CAAC,gBAAgB,CACrB,wDAAwD,CACzD;SACF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,UAAU,GAAG,IAAA,oFAAsC,EACvD;YACE,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,6BAA6B;YACzC,OAAO,EAAE,mCAAa,CAAC,GAAG;YAC1B,KAAK,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC;SAC5C,EACD;YACE;gBACE,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,gCAAgC;gBAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,SAAS,EAAE,MAAM;gBACjB,KAAK,EAAE,CAAC,eAAe,CAAC;aACzB;SACF,CACF,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CACxB,MAAM,CAAC,eAAe,CAAC;YACrB,wFAAwF;YACxF,kGAAkG;SACnG,CAAC,CACH,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CACxB,MAAM,CAAC,eAAe,CAAC;YACrB,MAAM,CAAC,gBAAgB,CACrB,0DAA0D,CAC3D;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CACxB,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;YACzB,MAAM,CAAC,gBAAgB,CACrB,wDAAwD,CACzD;SACF,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,UAAU,GAAG,IAAA,6DAA2B,EAAC;YAC7C,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,wBAAwB;YACpC,IAAI,EAAE,6BAAU,CAAC,WAAW;YAC5B,KAAK,EAAE,uEAAuE;SAC/E,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACxB,2KAA2K,CAC5K,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,UAAU,GAAG,IAAA,6DAA2B,EAAC;YAC7C,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,gCAAgC;YAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;YAC7B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACxB,yHAAyH,CAC1H,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN;YACE,sBAAsB;YACtB;gBACE,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,gCAAgC;gBAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;aAC9B;YACD,qCAAqC;SACtC;QACD;YACE,uBAAuB;YACvB;gBACE,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,gCAAgC;gBAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,MAAM;aAClB;YACD,4CAA4C;SAC7C;QACD;YACE,mBAAmB;YACnB;gBACE,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,gCAAgC;gBAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;gBAC7B,KAAK,EAAE,MAAM;gBACb,SAAS,EAAE,MAAM;aAClB;YACD,wCAAwC;SACzC;QACD;YACE,0BAA0B;YAC1B;gBACE,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,gCAAgC;gBAC5C,OAAO,EAAE,mCAAa,CAAC,MAAM;aAC9B;YACD,yCAAyC;SAC1C;QACD;YACE,wBAAwB;YACxB;gBACE,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,6BAA6B;aAC1C;YACD,kDAAkD;SACnD;KACF,CAAC,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6DAA2B,EAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,GAAG,GAAG,IAAA,4CAAmB,EAAC;YAC9B,UAAU,EAAE,QAAQ;YACpB,SAAS,EAAE,kBAAkB;YAC7B,UAAU,EAAE,qCAAqC;SAClD,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,8CAA8C,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CACnB,0FAA0F,CAC3F,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/row-level-security-context-builder.spec.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/utils/row-level-security-context-builder.spec.js

@@ -1,40 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const row_level_security_context_builder_1 = require("./row-level-security-context-builder");
-describe("RowLevelSecurityContextBuilder", () => {
-    it("generates transaction-local tenant context SQL", () => {
-        const builder = new row_level_security_context_builder_1.RowLevelSecurityContextBuilder();
-        builder.set("request_id", "1");
-        builder.set("tenant_id", "42");
-        expect(builder.entries()).toEqual([
-            ["request_id", "1"],
-            ["tenant_id", "42"],
-        ]);
-        expect(builder.toSQL()).toBe("SELECT set_config('app.request_id', '1', true),set_config('app.tenant_id', '42', true);");
-    });
-    it("ignores null and undefined values", () => {
-        const builder = new row_level_security_context_builder_1.RowLevelSecurityContextBuilder();
-        builder.set("request_id", undefined);
-        builder.set("tenant_id", null);
-        builder.set("is_enabled", false);
-        expect(builder.entries()).toEqual([["is_enabled", "false"]]);
-        expect(builder.toSQL()).toBe("SELECT set_config('app.is_enabled', 'false', true);");
-    });
-    it("renders no-op SQL when every value is nullish", () => {
-        const builder = new row_level_security_context_builder_1.RowLevelSecurityContextBuilder();
-        builder.set("request_id", undefined);
-        builder.set("tenant_id", null);
-        expect(builder.entries()).toEqual([]);
-        expect(builder.toSQL()).toBe("SELECT 1;");
-    });
-    it("escapes string values for SQL literals", () => {
-        const builder = new row_level_security_context_builder_1.RowLevelSecurityContextBuilder();
-        builder.set("user_name", "O'Connor");
-        expect(builder.toSQL()).toBe("SELECT set_config('app.user_name', 'O''Connor', true);");
-    });
-    it("rejects non snake_case context keys", () => {
-        const builder = new row_level_security_context_builder_1.RowLevelSecurityContextBuilder();
-        expect(() => builder.set("userId", "1")).toThrow("Row level security context key must be snake_case");
-    });
-});
-//# sourceMappingURL=row-level-security-context-builder.spec.js.map

package/dist/utils/row-level-security-context-builder.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"row-level-security-context-builder.spec.js","sourceRoot":"","sources":["../../src/utils/row-level-security-context-builder.spec.ts"],"names":[],"mappings":";;AAAA,6FAAsF;AAEtF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,OAAO,GAAG,IAAI,mEAA8B,EAAE,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;YAChC,CAAC,YAAY,EAAE,GAAG,CAAC;YACnB,CAAC,WAAW,EAAE,IAAI,CAAC;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAC1B,yFAAyF,CAC1F,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,OAAO,GAAG,IAAI,mEAA8B,EAAE,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAEjC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAC1B,qDAAqD,CACtD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,OAAO,GAAG,IAAI,mEAA8B,EAAE,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,OAAO,GAAG,IAAI,mEAA8B,EAAE,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAErC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAC1B,wDAAwD,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,OAAO,GAAG,IAAI,mEAA8B,EAAE,CAAC;QAErD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAiB,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CACvD,mDAAmD,CACpD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}