@prisma-next/target-postgres 0.14.0-dev.11 → 0.14.0-dev.12

package/dist/{nodes-pLeLgdis.d.mts → nodes-YvdohJ2X.d.mts}

@@ -1,3 +1,4 @@
+import { n as RlsPolicyOperation } from "./canonicalize-CAbXtVtB.mjs";
 import { DdlColumn, DdlNode, DdlTableConstraint } from "@prisma-next/sql-relational-core/ast";
 
 //#region src/core/ddl/nodes.d.ts
@@ -19,6 +20,8 @@ interface PostgresDdlVisitor<R> {
   createTable(node: PostgresCreateTable): R;
   createSchema(node: PostgresCreateSchema): R;
   alterTable(node: PostgresAlterTable): R;
+  createPolicy(node: PostgresCreatePolicy): R;
+  dropPolicy(node: PostgresDropPolicy): R;
 }
 declare abstract class PostgresDdlNode extends DdlNode {
   abstract accept<R>(visitor: PostgresDdlVisitor<R>): R;
@@ -61,7 +64,41 @@ declare class PostgresAlterTable extends PostgresDdlNode {
   });
   accept<R>(visitor: PostgresDdlVisitor<R>): R;
 }
-type AnyPostgresDdlNode = PostgresCreateTable | PostgresCreateSchema | PostgresAlterTable;
+declare class PostgresCreatePolicy extends PostgresDdlNode {
+  readonly kind: "create-policy";
+  readonly schema: string;
+  readonly table: string;
+  readonly name: string;
+  readonly permissive: boolean;
+  readonly operation: RlsPolicyOperation;
+  readonly roles: ReadonlyArray<string>;
+  readonly using: string | undefined;
+  readonly withCheck: string | undefined;
+  constructor(options: {
+    readonly schema: string;
+    readonly table: string;
+    readonly name: string;
+    readonly permissive: boolean;
+    readonly operation: RlsPolicyOperation;
+    readonly roles: readonly string[];
+    readonly using?: string;
+    readonly withCheck?: string;
+  });
+  accept<R>(visitor: PostgresDdlVisitor<R>): R;
+}
+declare class PostgresDropPolicy extends PostgresDdlNode {
+  readonly kind: "drop-policy";
+  readonly schema: string;
+  readonly table: string;
+  readonly name: string;
+  constructor(options: {
+    readonly schema: string;
+    readonly table: string;
+    readonly name: string;
+  });
+  accept<R>(visitor: PostgresDdlVisitor<R>): R;
+}
+type AnyPostgresDdlNode = PostgresCreateTable | PostgresCreateSchema | PostgresAlterTable | PostgresCreatePolicy | PostgresDropPolicy;
 //#endregion
-export { PostgresAlterTable as a, PostgresDdlNode as c, AnyPostgresDdlNode as i, PostgresDdlVisitor as l, AlterTableActionVisitor as n, PostgresCreateSchema as o, AnyAlterTableAction as r, PostgresCreateTable as s, AddColumnAction as t };
-//# sourceMappingURL=nodes-pLeLgdis.d.mts.map
+export { PostgresAlterTable as a, PostgresCreateTable as c, PostgresDropPolicy as d, AnyPostgresDdlNode as i, PostgresDdlNode as l, AlterTableActionVisitor as n, PostgresCreatePolicy as o, AnyAlterTableAction as r, PostgresCreateSchema as s, AddColumnAction as t, PostgresDdlVisitor as u };
+//# sourceMappingURL=nodes-YvdohJ2X.d.mts.map

package/dist/nodes-YvdohJ2X.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nodes-YvdohJ2X.d.mts","names":[],"sources":["../src/core/ddl/nodes.ts"],"mappings":";;;;UAWiB,uBAAA;EACf,SAAA,CAAU,MAAA,EAAQ,eAAA,GAAkB,CAAC;AAAA;AAAA,uBAGjB,gBAAA;EAAA,kBACF,IAAA;EAAA,SACT,MAAA,IAAU,OAAA,EAAS,uBAAA,CAAwB,CAAA,IAAK,CAAA;AAAA;AAAA,cAG9C,eAAA,SAAwB,gBAAA;EAAA,SAC1B,IAAA;EAAA,SACA,MAAA,EAAQ,SAAA;cAEL,MAAA,EAAQ,SAAA;EAMX,MAAA,IAAU,OAAA,EAAS,uBAAA,CAAwB,CAAA,IAAK,CAAA;AAAA;AAAA,KAK/C,mBAAA,GAAsB,eAAe;AAAA,UAMhC,kBAAA;EACf,WAAA,CAAY,IAAA,EAAM,mBAAA,GAAsB,CAAA;EACxC,YAAA,CAAa,IAAA,EAAM,oBAAA,GAAuB,CAAA;EAC1C,UAAA,CAAW,IAAA,EAAM,kBAAA,GAAqB,CAAA;EACtC,YAAA,CAAa,IAAA,EAAM,oBAAA,GAAuB,CAAA;EAC1C,UAAA,CAAW,IAAA,EAAM,kBAAA,GAAqB,CAAA;AAAA;AAAA,uBAGlB,eAAA,SAAwB,OAAA;EAAA,SACnC,MAAA,IAAU,OAAA,EAAS,kBAAA,CAAmB,CAAA,IAAK,CAAA;AAAA;AAAA,cAazC,mBAAA,SAA4B,eAAA;EAAA,SAC9B,IAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,WAAA;EAAA,SACA,OAAA,EAAS,aAAA,CAAc,SAAA;EAAA,SACvB,WAAA,EAAa,aAAA,CAAc,kBAAA;cAExB,OAAA;IAAA,SACD,KAAA;IAAA,SACA,MAAA;IAAA,SACA,WAAA;IAAA,SACA,OAAA,WAAkB,SAAA;IAAA,SAClB,WAAA,YAAuB,kBAAA;EAAA;EAWzB,MAAA,IAAU,OAAA,EAAS,kBAAA,CAAmB,CAAA,IAAK,CAAA;AAAA;AAAA,cAKzC,oBAAA,SAA6B,eAAA;EAAA,SAC/B,IAAA;EAAA,SACA,MAAA;EAAA,SACA,WAAA;cAEG,OAAA;IAAA,SAAoB,MAAA;IAAA,SAAyB,WAAA;EAAA;EAOhD,MAAA,IAAU,OAAA,EAAS,kBAAA,CAAmB,CAAA,IAAK,CAAA;AAAA;AAAA,cAKzC,kBAAA,SAA2B,eAAA;EAAA,SAC7B,IAAA;EAAA,SACA,KAAA;EAAA,SACA,MAAA;EAAA,SACA,OAAA,EAAS,aAAA,CAAc,mBAAA;cAEpB,OAAA;IAAA,SACD,KAAA;IAAA,SACA,MAAA;IAAA,SACA,OAAA,WAAkB,mBAAA;EAAA;EASpB,MAAA,IAAU,OAAA,EAAS,kBAAA,CAAmB,CAAA,IAAK,CAAA;AAAA;AAAA,cAOzC,oBAAA,SAA6B,eAAA;EAAA,SAC/B,IAAA;EAAA,SACA,MAAA;EAAA,SACA,KAAA;EAAA,SACA,IAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA,EAAW,kBAAA;EAAA,SACX,KAAA,EAAO,aAAA;EAAA,SACP,KAAA;EAAA,SACA,SAAA;cAEG,OAAA;IAAA,SACD,MAAA;IAAA,SACA,KAAA;IAAA,SACA,IAAA;IAAA,SACA,UAAA;IAAA,SACA,SAAA,EAAW,kBAAA;IAAA,SACX,KAAA;IAAA,SACA,KAAA;IAAA,SACA,SAAA;EAAA;EAcF,MAAA,IAAU,OAAA,EAAS,kBAAA,CAAmB,CAAA,IAAK,CAAA;AAAA;AAAA,cAKzC,kBAAA,SAA2B,eAAA;EAAA,SAC7B,IAAA;EAAA,SACA,MAAA;EAAA,SACA,KAAA;EAAA,SACA,IAAA;cAEG,OAAA;IAAA,SAAoB,MAAA;IAAA,SAAyB,KAAA;IAAA,SAAwB,IAAA;EAAA;EAQxE,MAAA,IAAU,OAAA,EAAS,kBAAA,CAAmB,CAAA,IAAK,CAAA;AAAA;AAAA,KAK1C,kBAAA,GACR,mBAAA,GACA,oBAAA,GACA,kBAAA,GACA,oBAAA,GACA,kBAAA"}

package/dist/{op-factory-call-DmQEc3XV.d.mts → op-factory-call-DXHAIisl.d.mts}

@@ -1,8 +1,9 @@
-import { t as PostgresPlanTargetDetails } from "./planner-target-details-CIY6tLeo.mjs";
+import { t as PostgresPlanTargetDetails } from "./planner-target-details-HkP4RrRO.mjs";
+import { t as PostgresRlsPolicy } from "./postgres-rls-policy-D_z1osEq.mjs";
 import { DdlColumn, DdlTableConstraint } from "@prisma-next/sql-relational-core/ast";
 import { CodecControlHooks, SqlMigrationPlanOperation } from "@prisma-next/family-sql/control";
-import { ImportRequirement, TsExpression } from "@prisma-next/ts-render";
 import { ReferentialAction, StorageColumn, StorageTypeInstance } from "@prisma-next/sql-contract/types";
+import { ImportRequirement, TsExpression } from "@prisma-next/ts-render";
 import { MigrationOperationClass, OpFactoryCall } from "@prisma-next/framework-components/control";
 import { ExecuteRequestLowerer, Lowerer } from "@prisma-next/family-sql/control-adapter";
 
@@ -374,7 +375,39 @@ declare class DataTransformCall extends PostgresOpFactoryCallNode {
   renderTypeScript(): string;
   importRequirements(): readonly ImportRequirement[];
 }
-type PostgresOpFactoryCall = CreateTableCall | DropTableCall | AddColumnCall | DropColumnCall | AlterColumnTypeCall | SetNotNullCall | DropNotNullCall | SetDefaultCall | DropDefaultCall | AddNotNullColumnDirectCall | AddNotNullColumnWithTempDefaultCall | AddPrimaryKeyCall | AddForeignKeyCall | AddUniqueCall | AddCheckConstraintCall | DropCheckConstraintCall | CreateIndexCall | DropIndexCall | DropConstraintCall | RawSqlCall | CreateExtensionCall | CreateSchemaCall | DataTransformCall;
+declare class CreatePostgresRlsPolicyCall extends PostgresOpFactoryCallNode {
+  readonly factoryName: "createRlsPolicy";
+  readonly operationClass: "additive";
+  readonly schemaName: string;
+  readonly tableName: string;
+  readonly policy: PostgresRlsPolicy;
+  readonly label: string;
+  constructor(schemaName: string, tableName: string, policy: PostgresRlsPolicy);
+  toOp(lowerer?: ExecuteRequestLowerer): Promise<Op>;
+  renderTypeScript(): string;
+}
+declare class DropPostgresRlsPolicyCall extends PostgresOpFactoryCallNode {
+  readonly factoryName: "dropRlsPolicy";
+  readonly operationClass: "destructive";
+  readonly schemaName: string;
+  readonly tableName: string;
+  readonly policyName: string;
+  readonly label: string;
+  constructor(schemaName: string, tableName: string, policyName: string);
+  toOp(lowerer?: ExecuteRequestLowerer): Promise<Op>;
+  renderTypeScript(): string;
+}
+declare class EnableRowLevelSecurityCall extends PostgresOpFactoryCallNode {
+  readonly factoryName: "enableRowLevelSecurity";
+  readonly operationClass: "additive";
+  readonly schemaName: string;
+  readonly tableName: string;
+  readonly label: string;
+  constructor(schemaName: string, tableName: string);
+  toOp(lowerer?: ExecuteRequestLowerer): Promise<Op>;
+  renderTypeScript(): string;
+}
+type PostgresOpFactoryCall = CreateTableCall | DropTableCall | AddColumnCall | DropColumnCall | AlterColumnTypeCall | SetNotNullCall | DropNotNullCall | SetDefaultCall | DropDefaultCall | AddNotNullColumnDirectCall | AddNotNullColumnWithTempDefaultCall | AddPrimaryKeyCall | AddForeignKeyCall | AddUniqueCall | AddCheckConstraintCall | DropCheckConstraintCall | CreateIndexCall | DropIndexCall | DropConstraintCall | RawSqlCall | CreateExtensionCall | CreateSchemaCall | CreatePostgresRlsPolicyCall | DropPostgresRlsPolicyCall | EnableRowLevelSecurityCall | DataTransformCall;
 //#endregion
 export { SetNotNullCall as C, SetDefaultCall as S, Op$1 as T, DropIndexCall as _, AddUniqueCall as a, PostgresOpFactoryCall as b, CreateExtensionCall as c, CreateTableCall as d, DataTransformCall as f, DropDefaultCall as g, DropConstraintCall as h, AddPrimaryKeyCall as i, CreateIndexCall as l, DropColumnCall as m, AddColumnCall as n, AlterColumnTypeCall as o, DropCheckConstraintCall as p, AddForeignKeyCall as r, AlterColumnTypeOptions as s, AddCheckConstraintCall as t, CreateSchemaCall as u, DropNotNullCall as v, ForeignKeySpec as w, RawSqlCall as x, DropTableCall as y };
-//# sourceMappingURL=op-factory-call-DmQEc3XV.d.mts.map
+//# sourceMappingURL=op-factory-call-DXHAIisl.d.mts.map

package/dist/op-factory-call-DXHAIisl.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"op-factory-call-DXHAIisl.d.mts","names":[],"sources":["../src/core/migrations/operations/shared.ts","../src/core/migrations/op-factory-call.ts"],"mappings":";;;;;;;;;;KAMY,IAAA,GAAK,yBAAyB,CAAC,yBAAA;;;;;;UA0B1B,cAAA;EAAA,SACN,IAAA;EAAA,SACA,OAAA;EAAA,SACA,UAAA;IAAA,SACE,MAAA;IAAA,SACA,KAAA;IAAA,SACA,OAAA;EAAA;EAAA,SAEF,QAAA,GAAW,iBAAA;EAAA,SACX,QAAA,GAAW,iBAAiB;AAAA;;;KC8BlC,EAAA,GAAK,yBAAyB,CAAC,yBAAA;AAAA,uBAoBrB,yBAAA,SAAkC,YAAA,YAAwB,aAAA;EAAA,kBACrD,WAAA;EAAA,kBACA,cAAA,EAAgB,uBAAA;EAAA,kBAChB,KAAA;EAAA,SACT,IAAA,CAAK,OAAA,GAAU,OAAA,GAAU,EAAA,GAAK,OAAA,CAAQ,EAAA;EAE/C,kBAAA,aAA+B,iBAAA;EAAA,UAIrB,MAAA;AAAA;AAAA,cAmGC,eAAA,SAAwB,yBAAA;EAAA,SAC1B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,OAAA,WAAkB,SAAA;EAAA,SAClB,WAAA,WAAsB,kBAAA;EAAA,SACtB,KAAA;cAGP,UAAA,UACA,SAAA,UACA,OAAA,WAAkB,SAAA,IAClB,WAAA,YAAuB,kBAAA;EAWnB,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EAoCrD,gBAAA;EAiBS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAe7B,aAAA,SAAsB,yBAAA;EAAA,SACxB,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA;EAQ1B,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EASS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAS7B,aAAA,SAAsB,yBAAA;EAAA,SACxB,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,MAAA,EAAQ,SAAA;EAAA,SACR,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,MAAA,EAAQ,SAAA;EASrD,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EA6BrD,gBAAA;EAUS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAW7B,cAAA,SAAuB,yBAAA;EAAA,SACzB,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,UAAA;EAS7C,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAUS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,UAKzB,sBAAA;EAAA,SACN,mBAAA;EAAA,SACA,kBAAA;EAAA,SACA,qBAAA;EAAA,SACA,KAAA;AAAA;AAAA,cAGE,mBAAA,SAA4B,yBAAA;EAAA,SAC9B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,OAAA,EAAS,sBAAA;EAAA,SACT,KAAA;cAGP,UAAA,UACA,SAAA,UACA,UAAA,UACA,OAAA,EAAS,sBAAA;EAWL,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAWS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,cAAA,SAAuB,yBAAA;EAAA,SACzB,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,UAAA;EAS7C,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAUS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,eAAA,SAAwB,yBAAA;EAAA,SAC1B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,UAAA;EAS7C,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAUS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,cAAA,SAAuB,yBAAA;EAAA,SACzB,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,UAAA;EAAA,SACA,KAAA;cAGP,UAAA,UACA,SAAA,UACA,UAAA,UACA,UAAA,UACA,cAAA;EAYI,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EAgBrD,gBAAA;EAcS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,eAAA,SAAwB,yBAAA;EAAA,SAC1B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,UAAA;EAS7C,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAUS,kBAAA,aAA+B,iBAAA;AAAA;;;;;;;;;;;cAmB7B,0BAAA,SAAmC,yBAAA;EAAA,SACrC,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,cAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,UAAA,UAAoB,cAAA;EAUjE,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EAerD,gBAAA;EAIS,kBAAA,aAA+B,iBAAA;AAAA;;;;;;;;;;;cAe7B,mCAAA,SAA4C,yBAAA;EAAA,SAC9C,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,MAAA,EAAQ,aAAA;EAAA,SACR,UAAA,EAAY,GAAA,SAAY,iBAAA;EAAA,SACxB,YAAA,EAAc,MAAA,SAAe,mBAAA;EAAA,SAC7B,gBAAA;EAAA,SACA,KAAA;cAEG,OAAA;IAAA,SACD,UAAA;IAAA,SACA,SAAA;IAAA,SACA,UAAA;IAAA,SACA,MAAA,EAAQ,aAAA;IAAA,SACR,UAAA,EAAY,GAAA,SAAY,iBAAA;IAAA,SACxB,YAAA,EAAc,MAAA,SAAe,mBAAA;IAAA,SAC7B,gBAAA;EAAA;EAcL,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EAkBrD,gBAAA;EAIS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAuB7B,iBAAA,SAA0B,yBAAA;EAAA,SAC5B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,cAAA;EAAA,SACA,OAAA;EAAA,SACA,KAAA;cAGP,UAAA,UACA,SAAA,UACA,cAAA,UACA,OAAA;EAWI,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EAerD,gBAAA;EAIS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,aAAA,SAAsB,yBAAA;EAAA,SACxB,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,cAAA;EAAA,SACA,OAAA;EAAA,SACA,KAAA;cAGP,UAAA,UACA,SAAA,UACA,cAAA,UACA,OAAA;EAWI,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAIS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,iBAAA,SAA0B,yBAAA;EAAA,SAC5B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,EAAA,EAAI,cAAA;EAAA,SACJ,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,EAAA,EAAI,cAAA;EASjD,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAUS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,kBAAA,SAA2B,yBAAA;EAAA,SAC7B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,cAAA;EAAA,SACA,IAAA;EAAA,SACA,KAAA;cAGP,UAAA,UACA,SAAA,UACA,cAAA,UACA,IAAA;EAWI,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAQS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,sBAAA,SAA+B,yBAAA;EAAA,SACjC,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,cAAA;EAAA,SACA,MAAA;EAAA,SACA,MAAA;EAAA,SACA,KAAA;cAGP,UAAA,UACA,SAAA,UACA,cAAA,UACA,MAAA,UACA,MAAA;EAYI,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EAgBrD,gBAAA;EAIS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,uBAAA,SAAgC,yBAAA;EAAA,SAClC,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,cAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,cAAA;EAS7C,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAIS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAS7B,eAAA,SAAwB,yBAAA;EAAA,SAC1B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,SAAA;EAAA,SACA,OAAA;EAAA,SAGA,SAAA;EAAA,SACA,OAAA,EAAS,MAAA;EAAA,SACT,KAAA;cAGP,UAAA,UACA,SAAA,UACA,SAAA,UACA,OAAA,qBACA,MAAA;IAAA,SAAoB,IAAA;IAAA,SAAwB,OAAA,GAAU,MAAA;EAAA;EAalD,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EAmBrD,gBAAA;EAiBS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAK7B,aAAA,SAAsB,yBAAA;EAAA,SACxB,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,SAAA;EAS7C,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;EAUS,kBAAA,aAA+B,iBAAA;AAAA;;;;;;;;;;;;;;cAsB7B,UAAA,SAAmB,yBAAA;EAAA,SACrB,WAAA;EAAA,SACA,cAAA,EAAgB,uBAAA;EAAA,SAChB,KAAA;EAAA,SACA,EAAA,EAAI,EAAA;cAED,EAAA,EAAI,EAAA;EAQhB,IAAA,IAAQ,EAAA;EAIR,gBAAA;AAAA;AAAA,cASW,mBAAA,SAA4B,yBAAyB;EAAA,SACvD,WAAA;EAAA,SACA,cAAA;EAAA,SACA,aAAA;EAAA,SACA,KAAA;cAEG,aAAA;EAOZ,IAAA,IAAQ,EAAA;EAIR,gBAAA;AAAA;AAAA,cAKW,gBAAA,SAAyB,yBAAA;EAAA,SAC3B,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,KAAA;cAEG,UAAA;EAON,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EA0BrD,gBAAA;EAIS,kBAAA,aAA+B,iBAAA;AAAA;;;;;;;;cAgB7B,iBAAA,SAA0B,yBAAA;EAAA,SAC5B,WAAA;EAAA,SACA,cAAA,EAAgB,uBAAA;EAAA,SAChB,KAAA;EAAA,SACA,SAAA;EAAA,SACA,OAAA;cAGP,KAAA,UACA,SAAA,UACA,OAAA,UACA,cAAA,GAAgB,uBAAA;EAUlB,IAAA,IAAQ,EAAA;EAIR,gBAAA;EASS,kBAAA,aAA+B,iBAAA;AAAA;AAAA,cAa7B,2BAAA,SAAoC,yBAAA;EAAA,SACtC,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,MAAA,EAAQ,iBAAA;EAAA,SACR,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,MAAA,EAAQ,iBAAA;EASrD,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;AAAA;AAAA,cAKW,yBAAA,SAAkC,yBAAA;EAAA,SACpC,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,UAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA,UAAmB,UAAA;EAS7C,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;AAAA;AAAA,cAKW,0BAAA,SAAmC,yBAAA;EAAA,SACrC,WAAA;EAAA,SACA,cAAA;EAAA,SACA,UAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;cAEG,UAAA,UAAoB,SAAA;EAQ1B,IAAA,CAAK,OAAA,GAAU,qBAAA,GAAwB,OAAA,CAAQ,EAAA;EASrD,gBAAA;AAAA;AAAA,KAKU,qBAAA,GACR,eAAA,GACA,aAAA,GACA,aAAA,GACA,cAAA,GACA,mBAAA,GACA,cAAA,GACA,eAAA,GACA,cAAA,GACA,eAAA,GACA,0BAAA,GACA,mCAAA,GACA,iBAAA,GACA,iBAAA,GACA,aAAA,GACA,sBAAA,GACA,uBAAA,GACA,eAAA,GACA,aAAA,GACA,kBAAA,GACA,UAAA,GACA,mBAAA,GACA,gBAAA,GACA,2BAAA,GACA,yBAAA,GACA,0BAAA,GACA,iBAAA"}

package/dist/{op-factory-call-D_p5vxwt.mjs → op-factory-call-tMksrGIq.mjs}

@@ -1,6 +1,6 @@
 import { i as quoteIdentifier, n as escapeLiteral } from "./sql-utils-DcfMz4MQ.mjs";
-import { a as columnDefaultAst, c as columnTypeAst, d as indexExistsAst, f as noNullValuesAst, i as createTable, l as constraintExistsAst, m as tableIsEmptyAst, n as alterTable, o as columnExistsAst, p as tableExistsAst, r as createSchema, s as columnNullabilityAst, t as addColumnAction, u as extensionExistsAst } from "./ddl-QDyOSeLc.mjs";
-import { n as qualifyTableName } from "./planner-sql-checks-jqUUGyQR.mjs";
+import { _ as tableExistsAst, a as createTable, c as columnExistsAst, d as constraintExistsAst, f as extensionExistsAst, g as rlsPolicyExistsAst, h as rlsEnabledAst, i as createSchema, l as columnNullabilityAst, m as noNullValuesAst, n as alterTable, o as dropPolicy, p as indexExistsAst, r as createPolicy, s as columnDefaultAst, t as addColumnAction, u as columnTypeAst, v as tableIsEmptyAst } from "./ddl-BlsTIBeP.mjs";
+import { n as qualifyTableName } from "./planner-sql-checks-CI6Z21mm.mjs";
 import { t as buildAddColumnSql } from "./planner-ddl-builders-B2wOwLqI.mjs";
 import { FunctionColumnDefault, LiteralColumnDefault } from "@prisma-next/sql-relational-core/ast";
 import { blindCast } from "@prisma-next/utils/casts";
@@ -463,6 +463,81 @@ async function dropIndex(schemaName, tableName, indexName, lowerer) {
 	};
 }
 //#endregion
+//#region src/core/migrations/operations/rls.ts
+const PLAIN_IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_$]*$/;
+function validateRoleName(role) {
+	if (!PLAIN_IDENTIFIER.test(role)) throw new Error(`Invalid role name ${JSON.stringify(role)}: role names must be plain SQL identifiers matching ^[A-Za-z_][A-Za-z0-9_$]*$`);
+	return role;
+}
+async function createRlsPolicy(schemaName, tableName, policy, lowerer) {
+	const validatedRoles = policy.roles.map(validateRoleName);
+	const ddlNode = createPolicy({
+		schema: schemaName,
+		table: tableName,
+		name: policy.name,
+		permissive: policy.permissive,
+		operation: policy.operation,
+		roles: validatedRoles,
+		...ifDefined("using", policy.using),
+		...ifDefined("withCheck", policy.withCheck)
+	});
+	const checks = rlsPolicyExistsAst({
+		schema: schemaName,
+		table: tableName,
+		policyName: policy.name
+	});
+	const absent = await lowerer.lowerToExecuteRequest(checks.policyAbsent());
+	const execute = await lowerer.lowerToExecuteRequest(ddlNode);
+	const present = await lowerer.lowerToExecuteRequest(checks.policyPresent());
+	return {
+		id: `rlsPolicy.${schemaName}.${tableName}.${policy.name}`,
+		label: `Create RLS policy "${policy.name}" on "${tableName}"`,
+		operationClass: "additive",
+		target: targetDetails("rlsPolicy", policy.name, schemaName, tableName),
+		precheck: [step(`ensure RLS policy "${policy.name}" does not exist`, absent.sql, absent.params)],
+		execute: [step(`create RLS policy "${policy.name}"`, execute.sql, execute.params)],
+		postcheck: [step(`verify RLS policy "${policy.name}" exists`, present.sql, present.params)]
+	};
+}
+async function dropRlsPolicy(schemaName, tableName, policyName, lowerer) {
+	const ddlNode = dropPolicy({
+		schema: schemaName,
+		table: tableName,
+		name: policyName
+	});
+	const checks = rlsPolicyExistsAst({
+		schema: schemaName,
+		table: tableName,
+		policyName
+	});
+	const present = await lowerer.lowerToExecuteRequest(checks.policyPresent());
+	const execute = await lowerer.lowerToExecuteRequest(ddlNode);
+	const absent = await lowerer.lowerToExecuteRequest(checks.policyAbsent());
+	return {
+		id: `rlsPolicy.${schemaName}.${tableName}.${policyName}.drop`,
+		label: `Drop RLS policy "${policyName}" on "${tableName}"`,
+		operationClass: "destructive",
+		target: targetDetails("rlsPolicy", policyName, schemaName, tableName),
+		precheck: [step(`ensure RLS policy "${policyName}" exists`, present.sql, present.params)],
+		execute: [step(`drop RLS policy "${policyName}"`, execute.sql, execute.params)],
+		postcheck: [step(`verify RLS policy "${policyName}" is absent`, absent.sql, absent.params)]
+	};
+}
+async function enableRowLevelSecurity(schemaName, tableName, lowerer) {
+	const checks = rlsEnabledAst(schemaName, tableName);
+	const disabled = await lowerer.lowerToExecuteRequest(checks.rlsDisabled());
+	const enabled = await lowerer.lowerToExecuteRequest(checks.rlsEnabled());
+	return {
+		id: `rowLevelSecurity.${schemaName}.${tableName}`,
+		label: `Enable row-level security on "${tableName}"`,
+		operationClass: "additive",
+		target: targetDetails("rowLevelSecurity", tableName, schemaName),
+		precheck: [step(`check RLS is not already enabled on "${tableName}"`, disabled.sql, disabled.params)],
+		execute: [step(`enable row-level security on "${tableName}"`, `ALTER TABLE ${qualifyTableName(schemaName, tableName)} ENABLE ROW LEVEL SECURITY`)],
+		postcheck: [step(`verify row-level security is enabled on "${tableName}"`, enabled.sql, enabled.params)]
+	};
+}
+//#endregion
 //#region src/core/migrations/operations/tables.ts
 async function dropTable(schemaName, tableName, lowerer) {
 	const qualified = qualifyTableName(schemaName, tableName);
@@ -1484,7 +1559,74 @@ var DataTransformCall = class extends PostgresOpFactoryCallNode {
 		}];
 	}
 };
+var CreatePostgresRlsPolicyCall = class extends PostgresOpFactoryCallNode {
+	factoryName = "createRlsPolicy";
+	operationClass = "additive";
+	schemaName;
+	tableName;
+	policy;
+	label;
+	constructor(schemaName, tableName, policy) {
+		super();
+		this.schemaName = schemaName;
+		this.tableName = tableName;
+		this.policy = policy;
+		this.label = `Create RLS policy "${policy.name}" on "${tableName}"`;
+		this.freeze();
+	}
+	async toOp(lowerer) {
+		if (lowerer === void 0) throw new Error(`CreatePostgresRlsPolicyCall.toOp: a lowerer is required on the Postgres planner path (policy "${this.policy.name}" on table "${this.tableName}"). Pass the control adapter to createPostgresMigrationPlanner.`);
+		return createRlsPolicy(this.schemaName, this.tableName, this.policy, lowerer);
+	}
+	renderTypeScript() {
+		return `createRlsPolicy(${jsonToTsSource(this.schemaName)}, ${jsonToTsSource(this.tableName)}, ${jsonToTsSource(this.policy)})`;
+	}
+};
+var DropPostgresRlsPolicyCall = class extends PostgresOpFactoryCallNode {
+	factoryName = "dropRlsPolicy";
+	operationClass = "destructive";
+	schemaName;
+	tableName;
+	policyName;
+	label;
+	constructor(schemaName, tableName, policyName) {
+		super();
+		this.schemaName = schemaName;
+		this.tableName = tableName;
+		this.policyName = policyName;
+		this.label = `Drop RLS policy "${policyName}" on "${tableName}"`;
+		this.freeze();
+	}
+	async toOp(lowerer) {
+		if (lowerer === void 0) throw new Error(`DropPostgresRlsPolicyCall.toOp: a lowerer is required on the Postgres planner path (policy "${this.policyName}" on table "${this.tableName}"). Pass the control adapter to createPostgresMigrationPlanner.`);
+		return dropRlsPolicy(this.schemaName, this.tableName, this.policyName, lowerer);
+	}
+	renderTypeScript() {
+		return `dropRlsPolicy(${jsonToTsSource(this.schemaName)}, ${jsonToTsSource(this.tableName)}, ${jsonToTsSource(this.policyName)})`;
+	}
+};
+var EnableRowLevelSecurityCall = class extends PostgresOpFactoryCallNode {
+	factoryName = "enableRowLevelSecurity";
+	operationClass = "additive";
+	schemaName;
+	tableName;
+	label;
+	constructor(schemaName, tableName) {
+		super();
+		this.schemaName = schemaName;
+		this.tableName = tableName;
+		this.label = `Enable row-level security on "${tableName}"`;
+		this.freeze();
+	}
+	async toOp(lowerer) {
+		if (lowerer === void 0) throw new Error(`EnableRowLevelSecurityCall.toOp: a lowerer is required on the Postgres planner path (table "${this.tableName}"). Pass the control adapter to createPostgresMigrationPlanner.`);
+		return enableRowLevelSecurity(this.schemaName, this.tableName, lowerer);
+	}
+	renderTypeScript() {
+		return `enableRowLevelSecurity(${jsonToTsSource(this.schemaName)}, ${jsonToTsSource(this.tableName)})`;
+	}
+};
 //#endregion
-export { SetNotNullCall as C, installExtension as D, createExtension as E, SetDefaultCall as S, buildTargetDetails as T, DropDefaultCall as _, AddNotNullColumnWithTempDefaultCall as a, DropTableCall as b, AlterColumnTypeCall as c, CreateSchemaCall as d, CreateTableCall as f, DropConstraintCall as g, DropColumnCall as h, AddNotNullColumnDirectCall as i, CreateExtensionCall as l, DropCheckConstraintCall as m, AddColumnCall as n, AddPrimaryKeyCall as o, DataTransformCall as p, AddForeignKeyCall as r, AddUniqueCall as s, AddCheckConstraintCall as t, CreateIndexCall as u, DropIndexCall as v, postgresDefaultToDdlColumnDefault as w, RawSqlCall as x, DropNotNullCall as y };
+export { installExtension as A, EnableRowLevelSecurityCall as C, postgresDefaultToDdlColumnDefault as D, SetNotNullCall as E, buildTargetDetails as O, DropTableCall as S, SetDefaultCall as T, DropConstraintCall as _, AddNotNullColumnWithTempDefaultCall as a, DropNotNullCall as b, AlterColumnTypeCall as c, CreatePostgresRlsPolicyCall as d, CreateSchemaCall as f, DropColumnCall as g, DropCheckConstraintCall as h, AddNotNullColumnDirectCall as i, createExtension as k, CreateExtensionCall as l, DataTransformCall as m, AddColumnCall as n, AddPrimaryKeyCall as o, CreateTableCall as p, AddForeignKeyCall as r, AddUniqueCall as s, AddCheckConstraintCall as t, CreateIndexCall as u, DropDefaultCall as v, RawSqlCall as w, DropPostgresRlsPolicyCall as x, DropIndexCall as y };
 
-//# sourceMappingURL=op-factory-call-D_p5vxwt.mjs.map
+//# sourceMappingURL=op-factory-call-tMksrGIq.mjs.map