@permis/drizzle 0.0.0

package/dist/index.d.mts

@@ -0,0 +1,352 @@
+import * as _$drizzle_orm_sqlite_core0 from "drizzle-orm/sqlite-core";
+import * as _$drizzle_orm_better_sqlite30 from "drizzle-orm/better-sqlite3";
+import { PermisAdapter } from "@permis/core";
+
+//#region src/schema.d.ts
+interface PermisSchemaOptions {
+  tablePrefix?: string;
+}
+declare function createPermisSchema(options?: PermisSchemaOptions): {
+  roles: _$drizzle_orm_sqlite_core0.SQLiteTableWithColumns<{
+    name: `${string}roles`;
+    schema: undefined;
+    columns: {
+      name: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "name";
+        tableName: `${string}roles`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      description: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "description";
+        tableName: `${string}roles`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      condition: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "condition";
+        tableName: `${string}roles`;
+        dataType: "json";
+        columnType: "SQLiteTextJson";
+        data: unknown;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      active: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "active";
+        tableName: `${string}roles`;
+        dataType: "boolean";
+        columnType: "SQLiteBoolean";
+        data: boolean;
+        driverParam: number;
+        notNull: false;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      created_at: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "created_at";
+        tableName: `${string}roles`;
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: true;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+    };
+    dialect: 'sqlite';
+  }>;
+  permissions: _$drizzle_orm_sqlite_core0.SQLiteTableWithColumns<{
+    name: `${string}permissions`;
+    schema: undefined;
+    columns: {
+      id: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "id";
+        tableName: `${string}permissions`;
+        dataType: "number";
+        columnType: "SQLiteInteger";
+        data: number;
+        driverParam: number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: true;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      action: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "action";
+        tableName: `${string}permissions`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      resource: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "resource";
+        tableName: `${string}permissions`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      fields: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "fields";
+        tableName: `${string}permissions`;
+        dataType: "json";
+        columnType: "SQLiteTextJson";
+        data: unknown;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      condition: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "condition";
+        tableName: `${string}permissions`;
+        dataType: "json";
+        columnType: "SQLiteTextJson";
+        data: unknown;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      description: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "description";
+        tableName: `${string}permissions`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+    };
+    dialect: 'sqlite';
+  }>;
+  rolePermissions: _$drizzle_orm_sqlite_core0.SQLiteTableWithColumns<{
+    name: `${string}role_permissions`;
+    schema: undefined;
+    columns: {
+      role_name: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "role_name";
+        tableName: `${string}role_permissions`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      permission_id: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "permission_id";
+        tableName: `${string}role_permissions`;
+        dataType: "number";
+        columnType: "SQLiteInteger";
+        data: number;
+        driverParam: number;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+    };
+    dialect: 'sqlite';
+  }>;
+  subjectRoles: _$drizzle_orm_sqlite_core0.SQLiteTableWithColumns<{
+    name: `${string}subject_roles`;
+    schema: undefined;
+    columns: {
+      subject_id: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "subject_id";
+        tableName: `${string}subject_roles`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      role_name: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "role_name";
+        tableName: `${string}subject_roles`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: true;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+      granted_at: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "granted_at";
+        tableName: `${string}subject_roles`;
+        dataType: "date";
+        columnType: "SQLiteTimestamp";
+        data: Date;
+        driverParam: number;
+        notNull: true;
+        hasDefault: true;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: true;
+        enumValues: undefined;
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {}>;
+      granted_by: _$drizzle_orm_sqlite_core0.SQLiteColumn<{
+        name: "granted_by";
+        tableName: `${string}subject_roles`;
+        dataType: "string";
+        columnType: "SQLiteText";
+        data: string;
+        driverParam: string;
+        notNull: false;
+        hasDefault: false;
+        isPrimaryKey: false;
+        isAutoincrement: false;
+        hasRuntimeDefault: false;
+        enumValues: [string, ...string[]];
+        baseColumn: never;
+        identity: undefined;
+        generated: undefined;
+      }, {}, {
+        length: number | undefined;
+      }>;
+    };
+    dialect: 'sqlite';
+  }>;
+};
+//#endregion
+//#region src/adapter.d.ts
+type Schema = ReturnType<typeof createPermisSchema>;
+type DrizzleDb = ReturnType<typeof _$drizzle_orm_better_sqlite30.drizzle>;
+declare function drizzleAdapter(db: DrizzleDb, schema: Schema): PermisAdapter;
+//#endregion
+export { type PermisSchemaOptions, createPermisSchema, drizzleAdapter };

package/dist/index.mjs

@@ -0,0 +1 @@
+import{integer as e,sqliteTable as t,text as n}from"drizzle-orm/sqlite-core";import{and as r,eq as i}from"drizzle-orm";function a(r={}){let i=r.tablePrefix??`permis_`,a=t(`${i}roles`,{name:n(`name`).primaryKey(),description:n(`description`),condition:n(`condition`,{mode:`json`}),active:e(`active`,{mode:`boolean`}).default(!0),created_at:e(`created_at`,{mode:`timestamp`}).notNull().$defaultFn(()=>new Date)}),o=t(`${i}permissions`,{id:e(`id`).primaryKey({autoIncrement:!0}),action:n(`action`).notNull(),resource:n(`resource`).notNull(),fields:n(`fields`,{mode:`json`}),condition:n(`condition`,{mode:`json`}),description:n(`description`)});return{roles:a,permissions:o,rolePermissions:t(`${i}role_permissions`,{role_name:n(`role_name`).notNull().references(()=>a.name,{onDelete:`cascade`}),permission_id:e(`permission_id`).notNull().references(()=>o.id,{onDelete:`cascade`})}),subjectRoles:t(`${i}subject_roles`,{subject_id:n(`subject_id`).notNull(),role_name:n(`role_name`).notNull().references(()=>a.name,{onDelete:`cascade`}),granted_at:e(`granted_at`,{mode:`timestamp`}).notNull().$defaultFn(()=>new Date),granted_by:n(`granted_by`)})}}function o(e,t){let{permissions:n,rolePermissions:a,subjectRoles:o}=t,s={async getRolesForSubject(t){return e.select({roleName:o.role_name}).from(o).where(i(o.subject_id,t)).all().map(e=>e.roleName)},async getPermissionsForRole(t){return e.select({action:n.action,resource:n.resource,fields:n.fields,condition:n.condition,description:n.description}).from(a).innerJoin(n,i(a.permission_id,n.id)).where(i(a.role_name,t)).all().map(e=>{let t={action:e.action,resource:e.resource};if(e.fields)try{t.fields=JSON.parse(e.fields)}catch{}if(e.condition)try{let n=JSON.parse(e.condition);if(Array.isArray(n)){for(let e of n)if(e.operator===`matches`&&typeof e.value==`string`)try{e.value=new RegExp(e.value)}catch{}}t.conditions=n}catch{}return e.description&&(t.description=e.description),t})},async getPermissionsForSubject(t){let n=e.select({roleName:o.role_name}).from(o).where(i(o.subject_id,t)).all().map(e=>e.roleName);if(n.length===0)return[];let r=[];for(let e of n){let t=await s.getPermissionsForRole(e);r.push(...t)}return r},async resolveSubject(e){return{id:e}},async resolveResource(e,t){return{type:e,id:t}},async assignRole(t,n){e.select().from(o).where(r(i(o.subject_id,t),i(o.role_name,n))).all().length===0&&e.insert(o).values({subject_id:t,role_name:n,granted_at:new Date}).run()},async revokeRole(t,n){e.delete(o).where(r(i(o.subject_id,t),i(o.role_name,n))).run()},async grantPermission(t,r){let i=Array.isArray(r.action)?JSON.stringify(r.action):r.action,o=Array.isArray(r.resource)?JSON.stringify(r.resource):r.resource,s=null;if(r.conditions){let e=r.conditions.map(e=>e.operator===`matches`&&e.value instanceof RegExp?{...e,value:e.value.source}:e);s=JSON.stringify(e)}let c=e.insert(n).values({action:i,resource:o,fields:r.fields?JSON.stringify(r.fields):null,condition:s,description:r.description??null}).returning({id:n.id}).get();c&&e.insert(a).values({role_name:t,permission_id:c.id}).run()},async revokePermission(t,o,s){let c=e.select({id:n.id}).from(a).innerJoin(n,i(a.permission_id,n.id)).where(r(i(a.role_name,t),i(n.action,o),i(n.resource,s))).all();for(let t of c)e.delete(a).where(i(a.permission_id,t.id)).run(),e.delete(n).where(i(n.id,t.id)).run()}};return s}export{a as createPermisSchema,o as drizzleAdapter};

package/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@permis/drizzle",
+  "version": "0.0.0",
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": "./dist/index.mjs",
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "build": "vp pack",
+    "dev": "vp pack --watch",
+    "test": "vp test",
+    "check": "vp check"
+  },
+  "dependencies": {
+    "@permis/core": "workspace:*"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "better-sqlite3": "^11.10.0",
+    "drizzle-orm": "^0.44.0"
+  },
+  "peerDependencies": {
+    "drizzle-orm": "^0.44.0"
+  }
+}