@sqldoc/ns-rls 0.0.1 → 0.0.3

package/package.json

@@ -1,7 +1,7 @@
 {
   "type": "module",
   "name": "@sqldoc/ns-rls",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "Row-Level Security namespace for sqldoc -- generates CREATE POLICY and ALTER TABLE statements",
   "exports": {
     ".": {
@@ -14,17 +14,19 @@
   "types": "./src/index.ts",
   "files": [
     "src",
+    "!src/__tests__",
     "package.json"
   ],
+  "scripts": {
+    "test": "node --test 'src/__tests__/**/*.test.ts'",
+    "typecheck": "tsc --noEmit"
+  },
   "peerDependencies": {
-    "@sqldoc/core": "0.0.1"
+    "@sqldoc/core": "workspace:*"
   },
   "devDependencies": {
-    "typescript": "^5.9.3",
-    "vitest": "^4.1.0",
-    "@sqldoc/core": "0.0.1"
-  },
-  "scripts": {
-    "test": "vitest run"
+    "@sqldoc/core": "workspace:*",
+    "typescript": "catalog:",
+    "@sqldoc/test-utils": "workspace:*"
   }
-}
+}

package/src/index.ts

@@ -2,6 +2,8 @@ import type { NamespacePlugin, TagContext, TagOutput } from '@sqldoc/core'
 
 const plugin: NamespacePlugin = {
   apiVersion: 1,
+  databases: ['postgres'],
+  description: 'Row-Level Security policies for PostgreSQL',
   name: 'rls',
   tags: {
     policy: {

package/src/__tests__/rls.test.ts

@@ -1,119 +0,0 @@
-import type { TagContext } from '@sqldoc/core'
-import { describe, expect, it } from 'vitest'
-import plugin from '../index'
-
-function makeCtx(overrides: Partial<TagContext> = {}): TagContext {
-  return {
-    target: 'table',
-    objectName: 'users',
-    tag: { name: '$self', args: {} },
-    namespaceTags: [],
-    siblingTags: [],
-    fileTags: [],
-    astNode: null,
-    fileStatements: [],
-    config: {},
-    filePath: 'test.sql',
-    ...overrides,
-  }
-}
-
-describe('ns-rls plugin', () => {
-  it('exports apiVersion === 1', () => {
-    expect(plugin.apiVersion).toBe(1)
-  })
-
-  it('exports name === "rls"', () => {
-    expect(plugin.name).toBe('rls')
-  })
-
-  it('has policy and $self tag entries', () => {
-    expect(plugin.tags).toHaveProperty('policy')
-    expect(plugin.tags).toHaveProperty('$self')
-  })
-
-  describe('onTag', () => {
-    it('@rls.$self produces ALTER TABLE ENABLE ROW LEVEL SECURITY', () => {
-      const ctx = makeCtx({
-        objectName: 'users',
-        tag: { name: '$self', args: {} },
-      })
-      const result = plugin.onTag!(ctx) as any
-      expect(result.sql).toEqual([{ sql: 'ALTER TABLE "users" ENABLE ROW LEVEL SECURITY;' }])
-    })
-
-    it('@rls with null tag name produces ALTER TABLE ENABLE ROW LEVEL SECURITY', () => {
-      const ctx = makeCtx({
-        objectName: 'users',
-        tag: { name: null, args: {} },
-      })
-      const result = plugin.onTag!(ctx) as any
-      expect(result.sql).toEqual([{ sql: 'ALTER TABLE "users" ENABLE ROW LEVEL SECURITY;' }])
-    })
-
-    it('@rls.policy with for/to/using produces CREATE POLICY', () => {
-      const ctx = makeCtx({
-        objectName: 'users',
-        tag: {
-          name: 'policy',
-          args: { for: 'select', to: 'viewer_role', using: 'true' },
-        },
-      })
-      const result = plugin.onTag!(ctx) as any
-      expect(result.sql).toHaveLength(1)
-      expect(result.sql[0].sql).toContain('CREATE POLICY')
-      expect(result.sql[0].sql).toContain('"users_viewer_role_select"')
-      expect(result.sql[0].sql).toContain('ON "users"')
-      expect(result.sql[0].sql).toContain('FOR SELECT')
-      expect(result.sql[0].sql).toContain('TO viewer_role')
-      expect(result.sql[0].sql).toContain('USING (true)')
-    })
-
-    it('@rls.policy with using and check produces both clauses', () => {
-      const ctx = makeCtx({
-        objectName: 'users',
-        tag: {
-          name: 'policy',
-          args: {
-            for: 'all',
-            to: 'authenticated',
-            using: 'user_id = current_user_id()',
-            check: 'user_id = current_user_id()',
-          },
-        },
-      })
-      const result = plugin.onTag!(ctx) as any
-      expect(result.sql).toHaveLength(1)
-      expect(result.sql[0].sql).toContain('"users_authenticated_all"')
-      expect(result.sql[0].sql).toContain('FOR ALL')
-      expect(result.sql[0].sql).toContain('TO authenticated')
-      expect(result.sql[0].sql).toContain('USING (user_id = current_user_id())')
-      expect(result.sql[0].sql).toContain('WITH CHECK (user_id = current_user_id())')
-    })
-
-    it('policy name is auto-generated from table + role + command', () => {
-      const ctx = makeCtx({
-        objectName: 'orders',
-        tag: {
-          name: 'policy',
-          args: { for: 'insert', to: 'admin_role', using: 'true' },
-        },
-      })
-      const result = plugin.onTag!(ctx) as any
-      expect(result.sql[0].sql).toContain('"orders_admin_role_insert"')
-    })
-
-    it('@rls.policy with missing to arg defaults to PUBLIC', () => {
-      const ctx = makeCtx({
-        objectName: 'users',
-        tag: {
-          name: 'policy',
-          args: { for: 'select', using: 'true' },
-        },
-      })
-      const result = plugin.onTag!(ctx) as any
-      expect(result.sql[0].sql).toContain('TO PUBLIC')
-      expect(result.sql[0].sql).toContain('"users_public_select"')
-    })
-  })
-})