@palbase/backend 15.0.0 → 16.0.0

package/dist/{index-B398u5B0.d.ts → index-IYODApZV.d.ts}

@@ -324,9 +324,12 @@ type ColumnMap = Record<string, ColumnBuilder>;
  * `{ columns, rls?, policies? }`.
  *
  * - `columns`: the column map (required).
- * - `rls`: enable + FORCE row-level security on this table. Implied when
- *   `policies` is non-empty; set it explicitly to enable RLS with no policies
- *   yet (deny-all — useful only as an intermediate step).
+ * - `rls`: enable + FORCE row-level security on this table. **Defaults to
+ *   `true`**, and is forced on when `policies` is non-empty. A table with RLS
+ *   and no policies is deny-all, which is the starting state: nothing reads it
+ *   until a policy says who may. Set `rls: false` only for a genuinely public
+ *   table — it is an explicit opt-out that a reviewer can grep for, not
+ *   something you get by forgetting.
  * - `policies`: the RLS policies for this table, authored with `policy(name)`.
  *   Each entry may be a {@link PolicyBuilder} (the normal `policy(...)` chain)
  *   or a raw {@link PolicyDef} object.
@@ -381,7 +384,7 @@ interface TableInput<C extends ColumnMap = ColumnMap> {
  *
  * `defineSchema` derives `name` from the object key, so authors never repeat
  * the table name. `rls`/`policies` are always present after normalization
- * (defaulted to `false`/`[]`).
+ * (defaulted to `true`/`[]`).
  *
  * The `C` type parameter preserves the precise per-column phantom types so that
  * downstream mapped types (InsertShape, RowShape) can discriminate on them.
@@ -467,10 +470,13 @@ type TablesFromInput<T extends Record<string, TableInput>> = {
  * the runtime schema extractor parses. Per-column phantom types are preserved
  * so `Database.tables.todos.insert({...})` stays typed.
  *
- * RLS normalization: `rls` defaults to `false`, `policies` to `[]`. When
- * `policies` is non-empty, `rls` is forced on (ENABLE + FORCE) regardless of
- * the declared `rls` flag — a table with policies must have RLS enabled or the
- * policies would be inert.
+ * RLS normalization: `rls` defaults to **`true`**, `policies` to `[]`. A table
+ * that declares neither is therefore deny-all — nothing reads it until a policy
+ * says who may, which is the safe starting point rather than a bug. Declare
+ * `rls: false` for a genuinely public table; that is an explicit, greppable
+ * statement of intent instead of an omission. When `policies` is non-empty,
+ * `rls` is forced on (ENABLE + FORCE) regardless of the declared flag — a table
+ * with policies must have RLS enabled or the policies would be inert.
  */
 declare function defineSchema<T extends Record<string, TableInput>>(input: SchemaInput<T>): SchemaDef<TablesFromInput<T>>;
 

package/dist/index.cjs

@@ -1002,7 +1002,7 @@ function defineSchema(input) {
     const table = input.tables[name];
     if (table === void 0) continue;
     const policies = (table.policies ?? []).map(toPolicyDef);
-    const rls = table.rls === true || policies.length > 0;
+    const rls = policies.length > 0 || table.rls !== false;
     const tableDef = {
       name,
       columns: table.columns,