drizzle-kit 0.24.2-218cddb → 0.24.2-2475c4f

package/bin.cjs

@@ -1075,7 +1075,7 @@ var require_hanji = __commonJS({
 });
 
 // src/cli/views.ts
-var import_hanji, warning, err, info, grey, error, schema, isRenamePromptItem, ResolveColumnSelect, tableKey, ResolveSelect, ResolveSchemasSelect, Spinner, IntrospectProgress, MigrateProgress, ProgressView, DropMigrationView, trimmedRange;
+var import_hanji, warning, err, info, grey, error, schema, isRenamePromptItem, ResolveColumnSelect, tableKey, ResolveSelectNamed, ResolveSelect, ResolveSchemasSelect, Spinner, IntrospectProgress, MigrateProgress, ProgressView, DropMigrationView, trimmedRange;
 var init_views = __esm({
   "src/cli/views.ts"() {
     "use strict";
@@ -1178,6 +1178,53 @@ Is ${source_default.bold.blue(
     tableKey = (it) => {
       return it.schema === "public" || !it.schema ? it.name : `${it.schema}.${it.name}`;
     };
+    ResolveSelectNamed = class extends import_hanji.Prompt {
+      constructor(base, data, entityType) {
+        super();
+        this.base = base;
+        this.entityType = entityType;
+        this.on("attach", (terminal) => terminal.toggleCursor("hide"));
+        this.state = new import_hanji.SelectState(data);
+        this.state.bind(this);
+        this.base = base;
+      }
+      render(status) {
+        if (status === "submitted" || status === "aborted") {
+          return "";
+        }
+        const key = this.base.name;
+        let text = `
+Is ${source_default.bold.blue(key)} ${this.entityType} created or renamed from another ${this.entityType}?
+`;
+        const isSelectedRenamed = isRenamePromptItem(
+          this.state.items[this.state.selectedIdx]
+        );
+        const selectedPrefix = isSelectedRenamed ? source_default.yellow("\u276F ") : source_default.green("\u276F ");
+        const labelLength = this.state.items.filter((it) => isRenamePromptItem(it)).map((_2) => {
+          const it = _2;
+          const keyFrom = it.from.name;
+          return key.length + 3 + keyFrom.length;
+        }).reduce((a, b) => {
+          if (a > b) {
+            return a;
+          }
+          return b;
+        }, 0);
+        const entityType = this.entityType;
+        this.state.items.forEach((it, idx) => {
+          const isSelected = idx === this.state.selectedIdx;
+          const isRenamed = isRenamePromptItem(it);
+          const title = isRenamed ? `${it.from.name} \u203A ${it.to.name}`.padEnd(labelLength, " ") : it.name.padEnd(labelLength, " ");
+          const label = isRenamed ? `${source_default.yellow("~")} ${title} ${source_default.gray(`rename ${entityType}`)}` : `${source_default.green("+")} ${title} ${source_default.gray(`create ${entityType}`)}`;
+          text += isSelected ? `${selectedPrefix}${label}` : `  ${label}`;
+          text += idx != this.state.items.length - 1 ? "\n" : "";
+        });
+        return text;
+      }
+      result() {
+        return this.state.items[this.state.selectedIdx];
+      }
+    };
     ResolveSelect = class extends import_hanji.Prompt {
       constructor(base, data, entityType) {
         super();
@@ -1736,8 +1783,8 @@ var init_lib = __esm({
         return void 0;
       };
       util2.isInteger = typeof Number.isInteger === "function" ? (val2) => Number.isInteger(val2) : (val2) => typeof val2 === "number" && isFinite(val2) && Math.floor(val2) === val2;
-      function joinValues(array, separator = " | ") {
-        return array.map((val2) => typeof val2 === "string" ? `'${val2}'` : val2).join(separator);
+      function joinValues(array2, separator = " | ") {
+        return array2.map((val2) => typeof val2 === "string" ? `'${val2}'` : val2).join(separator);
       }
       util2.joinValues = joinValues;
       util2.jsonStringifyReplacer = (_2, value) => {
@@ -5706,7 +5753,7 @@ var init_vector = __esm({
 });
 
 // src/serializer/pgSchema.ts
-var indexV2, columnV2, tableV2, enumSchemaV1, enumSchema, pgSchemaV2, references, columnV1, tableV1, pgSchemaV1, indexColumn, index2, indexV4, indexV5, indexV6, fk2, sequenceSchema, sequenceSquashed, columnV7, column2, columnSquashed, tableV32, compositePK2, uniqueConstraint2, tableV42, tableV5, tableV6, tableV7, table2, schemaHash2, kitInternals2, pgSchemaInternalV3, pgSchemaInternalV4, pgSchemaInternalV5, pgSchemaInternalV6, pgSchemaExternal, pgSchemaInternalV7, pgSchemaInternal, tableSquashed2, tableSquashedV42, pgSchemaSquashedV4, pgSchemaSquashedV6, pgSchemaSquashed, pgSchemaV3, pgSchemaV4, pgSchemaV5, pgSchemaV6, pgSchemaV7, pgSchema, backwardCompatiblePgSchema, PgSquasher, squashPgScheme, dryPg;
+var indexV2, columnV2, tableV2, enumSchemaV1, enumSchema, pgSchemaV2, references, columnV1, tableV1, pgSchemaV1, indexColumn, index2, indexV4, indexV5, indexV6, fk2, sequenceSchema, roleSchema, sequenceSquashed, columnV7, column2, columnSquashed, tableV32, compositePK2, uniqueConstraint2, policy, tableV42, tableV5, tableV6, tableV7, table2, schemaHash2, kitInternals2, pgSchemaInternalV3, pgSchemaInternalV4, pgSchemaInternalV5, pgSchemaInternalV6, pgSchemaExternal, pgSchemaInternalV7, pgSchemaInternal, tableSquashed2, tableSquashedV42, pgSchemaSquashedV4, pgSchemaSquashedV6, pgSchemaSquashed, pgSchemaV3, pgSchemaV4, pgSchemaV5, pgSchemaV6, pgSchemaV7, pgSchema, backwardCompatiblePgSchema, PgSquasher, squashPgScheme, dryPg;
 var init_pgSchema = __esm({
   "src/serializer/pgSchema.ts"() {
     "use strict";
@@ -5838,6 +5885,12 @@ var init_pgSchema = __esm({
       cycle: booleanType().optional(),
       schema: stringType()
     }).strict();
+    roleSchema = objectType({
+      name: stringType(),
+      createDb: booleanType().optional(),
+      createRole: booleanType().optional(),
+      inherit: booleanType().optional()
+    }).strict();
     sequenceSquashed = objectType({
       name: stringType(),
       schema: stringType(),
@@ -5901,6 +5954,14 @@ var init_pgSchema = __esm({
       columns: stringType().array(),
       nullsNotDistinct: booleanType()
     }).strict();
+    policy = objectType({
+      name: stringType(),
+      as: enumType(["PERMISSIVE", "RESTRICTIVE"]).optional(),
+      for: enumType(["ALL", "SELECT", "INSERT", "UPDATE", "DELETE"]).optional(),
+      to: stringType().array().optional(),
+      using: stringType().optional(),
+      withCheck: stringType().optional()
+    }).strict();
     tableV42 = objectType({
       name: stringType(),
       schema: stringType(),
@@ -5942,7 +6003,8 @@ var init_pgSchema = __esm({
       indexes: recordType(stringType(), index2),
       foreignKeys: recordType(stringType(), fk2),
       compositePrimaryKeys: recordType(stringType(), compositePK2),
-      uniqueConstraints: recordType(stringType(), uniqueConstraint2).default({})
+      uniqueConstraints: recordType(stringType(), uniqueConstraint2).default({}),
+      policies: recordType(stringType(), policy).default({})
     }).strict();
     schemaHash2 = objectType({
       id: stringType(),
@@ -6036,6 +6098,7 @@ var init_pgSchema = __esm({
       enums: recordType(stringType(), enumSchema),
       schemas: recordType(stringType(), stringType()),
       sequences: recordType(stringType(), sequenceSchema).default({}),
+      roles: recordType(stringType(), roleSchema).default({}),
       _meta: objectType({
         schemas: recordType(stringType(), stringType()),
         tables: recordType(stringType(), stringType()),
@@ -6050,7 +6113,8 @@ var init_pgSchema = __esm({
       indexes: recordType(stringType(), stringType()),
       foreignKeys: recordType(stringType(), stringType()),
       compositePrimaryKeys: recordType(stringType(), stringType()),
-      uniqueConstraints: recordType(stringType(), stringType())
+      uniqueConstraints: recordType(stringType(), stringType()),
+      policies: recordType(stringType(), stringType())
     }).strict();
     tableSquashedV42 = objectType({
       name: stringType(),
@@ -6079,7 +6143,8 @@ var init_pgSchema = __esm({
       tables: recordType(stringType(), tableSquashed2),
       enums: recordType(stringType(), enumSchema),
       schemas: recordType(stringType(), stringType()),
-      sequences: recordType(stringType(), sequenceSquashed)
+      sequences: recordType(stringType(), sequenceSquashed),
+      roles: recordType(stringType(), roleSchema).default({})
     }).strict();
     pgSchemaV3 = pgSchemaInternalV3.merge(schemaHash2);
     pgSchemaV4 = pgSchemaInternalV4.merge(schemaHash2);
@@ -6162,6 +6227,25 @@ var init_pgSchema = __esm({
       squashFK: (fk4) => {
         return `${fk4.name};${fk4.tableFrom};${fk4.columnsFrom.join(",")};${fk4.tableTo};${fk4.columnsTo.join(",")};${fk4.onUpdate ?? ""};${fk4.onDelete ?? ""};${fk4.schemaTo || "public"}`;
       },
+      squashPolicy: (policy2) => {
+        var _a;
+        return `${policy2.name}--${policy2.as}--${policy2.for}--${(_a = policy2.to) == null ? void 0 : _a.join(",")}--${policy2.using}--${policy2.withCheck}`;
+      },
+      unsquashPolicy: (policy2) => {
+        const splitted = policy2.split("--");
+        return {
+          name: splitted[0],
+          as: splitted[1],
+          for: splitted[2],
+          to: splitted[3].split(","),
+          using: splitted[4] !== "undefined" ? splitted[4] : void 0,
+          withCheck: splitted[5] !== "undefined" ? splitted[5] : void 0
+        };
+      },
+      squashPolicyPush: (policy2) => {
+        var _a;
+        return `${policy2.name}--${policy2.as}--${policy2.for}--${(_a = policy2.to) == null ? void 0 : _a.join(",")}`;
+      },
       squashPK: (pk) => {
         return `${pk.columns.join(",")};${pk.name}`;
       },
@@ -6264,6 +6348,9 @@ var init_pgSchema = __esm({
               return PgSquasher.squashUnique(unq);
             }
           );
+          const squashedPolicies = mapValues(it[1].policies, (policy2) => {
+            return action === "push" ? PgSquasher.squashPolicyPush(policy2) : PgSquasher.squashPolicy(policy2);
+          });
           return [
             it[0],
             {
@@ -6273,7 +6360,8 @@ var init_pgSchema = __esm({
               indexes: squashedIndexes,
               foreignKeys: squashedFKs,
               compositePrimaryKeys: squashedPKs,
-              uniqueConstraints: squashedUniqueConstraints
+              uniqueConstraints: squashedUniqueConstraints,
+              policies: squashedPolicies
             }
           ];
         })
@@ -6296,7 +6384,8 @@ var init_pgSchema = __esm({
         tables: mappedTables,
         enums: json.enums,
         schemas: json.schemas,
-        sequences: mappedSequences
+        sequences: mappedSequences,
+        roles: json.roles
       };
     };
     dryPg = pgSchema.parse({
@@ -10590,10 +10679,10 @@ var require_inflight = __commonJS({
     }
     function slice(args) {
       var length = args.length;
-      var array = [];
+      var array2 = [];
       for (var i2 = 0; i2 < length; i2++)
-        array[i2] = args[i2];
-      return array;
+        array2[i2] = args[i2];
+      return array2;
     }
   }
 });
@@ -11412,6 +11501,13 @@ var init_cli = __esm({
       breakpoints: booleanType().optional().default(true),
       migrations: objectType({
         prefix: prefix.optional().default("index")
+      }).optional(),
+      entities: objectType({
+        roles: booleanType().or(objectType({
+          provider: stringType().optional(),
+          include: stringType().array().optional(),
+          exclude: stringType().array().optional()
+        })).optional().default(false)
       }).optional()
     }).passthrough();
     configCheck = objectType({
@@ -17594,7 +17690,8 @@ var init_utils4 = __esm({
           credentials: parsed2.data,
           tablesFilter,
           schemasFilter,
-          prefix: ((_a = config.migrations) == null ? void 0 : _a.prefix) || "index"
+          prefix: ((_a = config.migrations) == null ? void 0 : _a.prefix) || "index",
+          entities: config.entities
         };
       }
       if (dialect7 === "mysql") {
@@ -17611,7 +17708,8 @@ var init_utils4 = __esm({
           credentials: parsed2.data,
           tablesFilter,
           schemasFilter,
-          prefix: ((_b = config.migrations) == null ? void 0 : _b.prefix) || "index"
+          prefix: ((_b = config.migrations) == null ? void 0 : _b.prefix) || "index",
+          entities: config.entities
         };
       }
       if (dialect7 === "sqlite") {
@@ -17628,7 +17726,8 @@ var init_utils4 = __esm({
           credentials: parsed2.data,
           tablesFilter,
           schemasFilter,
-          prefix: ((_c = config.migrations) == null ? void 0 : _c.prefix) || "index"
+          prefix: ((_c = config.migrations) == null ? void 0 : _c.prefix) || "index",
+          entities: config.entities
         };
       }
       if (dialect7 === "turso") {
@@ -18464,6 +18563,7 @@ var init_pgImports = __esm({
       const enums = [];
       const schemas = [];
       const sequences = [];
+      const roles = [];
       const i0values = Object.values(exports2);
       i0values.forEach((t2) => {
         if ((0, import_pg_core.isPgEnum)(t2)) {
@@ -18479,14 +18579,18 @@ var init_pgImports = __esm({
         if ((0, import_pg_core.isPgSequence)(t2)) {
           sequences.push(t2);
         }
+        if ((0, import_drizzle_orm4.is)(t2, import_pg_core.PgRole)) {
+          roles.push(t2);
+        }
       });
-      return { tables, enums, schemas, sequences };
+      return { tables, enums, schemas, sequences, roles };
     };
     prepareFromPgImports = async (imports) => {
       let tables = [];
       let enums = [];
       let schemas = [];
       let sequences = [];
+      let roles = [];
       const { unregister } = await safeRegister();
       for (let i2 = 0; i2 < imports.length; i2++) {
         const it = imports[i2];
@@ -18496,9 +18600,10 @@ var init_pgImports = __esm({
         enums.push(...prepared.enums);
         schemas.push(...prepared.schemas);
         sequences.push(...prepared.sequences);
+        roles.push(...prepared.roles);
       }
       unregister();
-      return { tables: Array.from(new Set(tables)), enums, schemas, sequences };
+      return { tables: Array.from(new Set(tables)), enums, schemas, sequences, roles };
     };
   }
 });
@@ -18506,9 +18611,11 @@ var init_pgImports = __esm({
 // src/serializer/pgSerializer.ts
 var pgSerializer_exports = {};
 __export(pgSerializer_exports, {
+  buildArrayString: () => buildArrayString,
   fromDatabase: () => fromDatabase2,
   generatePgSnapshot: () => generatePgSnapshot,
-  indexName: () => indexName2
+  indexName: () => indexName2,
+  minRangeForIdentityBasedOn: () => minRangeForIdentityBasedOn
 });
 function stringFromIdentityProperty(field) {
   return typeof field === "string" ? field : typeof field === "undefined" ? void 0 : String(field);
@@ -18522,9 +18629,9 @@ function minRangeForIdentityBasedOn(columnType) {
 function stringFromDatabaseIdentityProperty(field) {
   return typeof field === "string" ? field : typeof field === "undefined" ? void 0 : typeof field === "bigint" ? field.toString() : String(field);
 }
-function buildArrayString(array, sqlType) {
+function buildArrayString(array2, sqlType) {
   sqlType = sqlType.split("[")[0];
-  const values = array.map((value) => {
+  const values = array2.map((value) => {
     if (typeof value === "number" || typeof value === "bigint") {
       return value.toString();
     } else if (typeof value === "boolean") {
@@ -18546,6 +18653,40 @@ function buildArrayString(array, sqlType) {
   }).join(",");
   return `{${values}}`;
 }
+function prepareRoles(entities) {
+  let useRoles = false;
+  const includeRoles = [];
+  const excludeRoles = [];
+  if (entities && entities.roles) {
+    if (typeof entities.roles === "object") {
+      if (entities.roles.provider) {
+        if (entities.roles.provider === "supabase") {
+          excludeRoles.push(...[
+            "anon",
+            "authenticator",
+            "authenticated",
+            "service_role",
+            "supabase_auth_admin",
+            "supabase_storage_admin",
+            "dashboard_user",
+            "supabase_admin"
+          ]);
+        } else if (entities.roles.provider === "neon") {
+          excludeRoles.push(...["authenticated", "anonymous"]);
+        }
+      }
+      if (entities.roles.include) {
+        includeRoles.push(...entities.roles.include);
+      }
+      if (entities.roles.exclude) {
+        excludeRoles.push(...entities.roles.exclude);
+      }
+    } else {
+      useRoles = entities.roles;
+    }
+  }
+  return { useRoles, includeRoles, excludeRoles };
+}
 var import_drizzle_orm5, import_pg_core2, import_pg_core3, dialect5, indexName2, generatePgSnapshot, trimChar, fromDatabase2, defaultForColumn;
 var init_pgSerializer = __esm({
   "src/serializer/pgSerializer.ts"() {
@@ -18562,10 +18703,11 @@ var init_pgSerializer = __esm({
     indexName2 = (tableName, columns) => {
       return `${tableName}_${columns.join("_")}_index`;
     };
-    generatePgSnapshot = (tables, enums, schemas, sequences, schemaFilter) => {
+    generatePgSnapshot = (tables, enums, schemas, sequences, roles, schemaFilter) => {
       var _a, _b, _c, _d, _e, _f;
       const result = {};
       const sequencesToReturn = {};
+      const rolesToReturn = {};
       const indexesInSchema = {};
       for (const table4 of tables) {
         const {
@@ -18576,7 +18718,8 @@ var init_pgSerializer = __esm({
           checks,
           schema: schema5,
           primaryKeys,
-          uniqueConstraints
+          uniqueConstraints,
+          policies
         } = (0, import_pg_core3.getTableConfig)(table4);
         if (schemaFilter && !schemaFilter.includes(schema5 ?? "public")) {
           continue;
@@ -18586,6 +18729,7 @@ var init_pgSerializer = __esm({
         const foreignKeysObject = {};
         const primaryKeysObject = {};
         const uniqueConstraintObject = {};
+        const policiesObject = {};
         columns.forEach((column7) => {
           var _a2, _b2, _c2, _d2, _e2, _f2;
           const notNull = column7.notNull;
@@ -18831,6 +18975,35 @@ ${withStyle.errorWarning(
             with: value.config.with ?? {}
           };
         });
+        policies.forEach((policy2) => {
+          var _a2, _b2;
+          const mappedTo = [];
+          if (!policy2.to) {
+            mappedTo.push("public");
+          } else {
+            if (policy2.to && typeof policy2.to === "string") {
+              mappedTo.push(policy2.to);
+            } else if (policy2.to && (0, import_drizzle_orm5.is)(policy2.to, import_pg_core2.PgRole)) {
+              mappedTo.push(policy2.to.name);
+            } else if (policy2.to && Array.isArray(policy2.to)) {
+              policy2.to.forEach((it) => {
+                if (typeof it === "string") {
+                  mappedTo.push(it);
+                } else if ((0, import_drizzle_orm5.is)(it, import_pg_core2.PgRole)) {
+                  mappedTo.push(it.name);
+                }
+              });
+            }
+          }
+          policiesObject[policy2.name] = {
+            name: policy2.name,
+            as: ((_a2 = policy2.as) == null ? void 0 : _a2.toUpperCase()) ?? "PERMISSIVE",
+            for: ((_b2 = policy2.for) == null ? void 0 : _b2.toUpperCase()) ?? "ALL",
+            to: mappedTo.sort(),
+            using: (0, import_drizzle_orm5.is)(policy2.using, import_drizzle_orm5.SQL) ? dialect5.sqlToQuery(policy2.using).sql : void 0,
+            withCheck: (0, import_drizzle_orm5.is)(policy2.withCheck, import_drizzle_orm5.SQL) ? dialect5.sqlToQuery(policy2.withCheck).sql : void 0
+          };
+        });
         const tableKey2 = `${schema5 ?? "public"}.${tableName}`;
         result[tableKey2] = {
           name: tableName,
@@ -18839,7 +19012,8 @@ ${withStyle.errorWarning(
           indexes: indexesObject,
           foreignKeys: foreignKeysObject,
           compositePrimaryKeys: primaryKeysObject,
-          uniqueConstraints: uniqueConstraintObject
+          uniqueConstraints: uniqueConstraintObject,
+          policies: policiesObject
         };
       }
       for (const sequence of sequences) {
@@ -18863,6 +19037,16 @@ ${withStyle.errorWarning(
         } else {
         }
       }
+      for (const role of roles) {
+        if (!role._existing) {
+          rolesToReturn[role.name] = {
+            name: role.name,
+            createDb: role.createDb === void 0 ? false : role.createDb,
+            createRole: role.createRole === void 0 ? false : role.createRole,
+            inherit: role.inherit === void 0 ? true : role.inherit
+          };
+        }
+      }
       const enumsToReturn = enums.reduce((map, obj) => {
         const enumSchema3 = obj.schema || "public";
         const key = `${enumSchema3}.${obj.enumName}`;
@@ -18889,6 +19073,7 @@ ${withStyle.errorWarning(
         enums: enumsToReturn,
         schemas: schemasObject,
         sequences: sequencesToReturn,
+        roles: rolesToReturn,
         _meta: {
           schemas: {},
           tables: {},
@@ -18905,7 +19090,7 @@ ${withStyle.errorWarning(
         --end;
       return start > 0 || end < str.length ? str.substring(start, end) : str.toString();
     };
-    fromDatabase2 = async (db, tablesFilter = () => true, schemaFilters, progressCallback) => {
+    fromDatabase2 = async (db, tablesFilter = () => true, schemaFilters, entities, progressCallback) => {
       const result = {};
       const internals = { tables: {} };
       const where = schemaFilters.map((t2) => `table_schema = '${t2}'`).join(" or ");
@@ -18987,6 +19172,55 @@ ${withStyle.errorWarning(
       if (progressCallback) {
         progressCallback("enums", Object.keys(enumsToReturn).length, "done");
       }
+      const allRoles = await db.query(
+        `SELECT rolname, rolinherit, rolcreatedb, rolcreaterole FROM pg_roles;`
+      );
+      const rolesToReturn = {};
+      const preparedRoles = prepareRoles(entities);
+      if (preparedRoles.useRoles || !(preparedRoles.includeRoles.length === 0 && preparedRoles.excludeRoles.length === 0)) {
+        for (const dbRole of allRoles) {
+          if (preparedRoles.useRoles) {
+            rolesToReturn[dbRole.rolname] = {
+              createDb: dbRole.rolcreatedb,
+              createRole: dbRole.rolcreatedb,
+              inherit: dbRole.rolinherit,
+              name: dbRole.rolname
+            };
+          } else {
+            if (preparedRoles.includeRoles.length === 0 && preparedRoles.excludeRoles.length === 0)
+              continue;
+            if (preparedRoles.includeRoles.includes(dbRole.rolname) && preparedRoles.excludeRoles.includes(dbRole.rolname))
+              continue;
+            if (preparedRoles.excludeRoles.includes(dbRole.rolname))
+              continue;
+            if (!preparedRoles.includeRoles.includes(dbRole.rolname))
+              continue;
+            rolesToReturn[dbRole.rolname] = {
+              createDb: dbRole.rolcreatedb,
+              createRole: dbRole.rolcreaterole,
+              inherit: dbRole.rolinherit,
+              name: dbRole.rolname
+            };
+          }
+        }
+      }
+      const wherePolicies = schemaFilters.map((t2) => `schemaname = '${t2}'`).join(" or ");
+      const policiesByTable = {};
+      const allPolicies = await db.query(`SELECT schemaname, tablename, policyname as name, permissive as "as", roles as to, cmd as for, qual as using, with_check as "withCheck" FROM pg_policies${wherePolicies === "" ? "" : ` WHERE ${wherePolicies}`};`);
+      for (const dbPolicy of allPolicies) {
+        const { tablename, schemaname, to, withCheck, using, ...rest } = dbPolicy;
+        const tableForPolicy = policiesByTable[`${schemaname}.${tablename}`];
+        const parsedTo = to === "{}" ? [] : to.substring(1, to.length - 1).split(/\s*,\s*/g).sort();
+        const parsedWithCheck = withCheck === null ? void 0 : withCheck;
+        const parsedUsing = using === null ? void 0 : using;
+        if (tableForPolicy) {
+          tableForPolicy[dbPolicy.name] = { ...rest, to: parsedTo };
+        } else {
+          policiesByTable[`${schemaname}.${tablename}`] = {
+            [dbPolicy.name]: { ...rest, to: parsedTo, withCheck: parsedWithCheck, using: parsedUsing }
+          };
+        }
+      }
       const sequencesInColumns = [];
       const all = allTables.map((row) => {
         return new Promise(async (res, rej) => {
@@ -19383,7 +19617,8 @@ ${withStyle.errorWarning(
               indexes: indexToReturn,
               foreignKeys: foreignKeysToReturn,
               compositePrimaryKeys: primaryKeys,
-              uniqueConstraints: uniqueConstrains
+              uniqueConstraints: uniqueConstrains,
+              policies: policiesByTable[`${tableSchema}.${tableName}`] ?? {}
             };
           } catch (e2) {
             rej(e2);
@@ -19410,6 +19645,7 @@ ${withStyle.errorWarning(
         enums: enumsToReturn,
         schemas: schemasObject,
         sequences: sequencesToReturn,
+        roles: rolesToReturn,
         _meta: {
           schemas: {},
           tables: {},
@@ -20052,10 +20288,10 @@ ${filenames.join("\n")}
       const filenames = prepareFilenames(path5);
       const { prepareFromPgImports: prepareFromPgImports2 } = await Promise.resolve().then(() => (init_pgImports(), pgImports_exports));
       const { generatePgSnapshot: generatePgSnapshot2 } = await Promise.resolve().then(() => (init_pgSerializer(), pgSerializer_exports));
-      const { tables, enums, schemas, sequences } = await prepareFromPgImports2(
+      const { tables, enums, schemas, sequences, roles } = await prepareFromPgImports2(
         filenames
       );
-      return generatePgSnapshot2(tables, enums, schemas, sequences, schemaFilter);
+      return generatePgSnapshot2(tables, enums, schemas, sequences, roles, schemaFilter);
     };
     serializeSQLite = async (path5) => {
       const filenames = prepareFilenames(path5);
@@ -20250,57 +20486,57 @@ var require_heap = __commonJS({
         }
         return [].splice.apply(a, [lo, lo - lo].concat(x2)), x2;
       };
-      heappush = function(array, item, cmp) {
+      heappush = function(array2, item, cmp) {
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        array.push(item);
-        return _siftdown(array, 0, array.length - 1, cmp);
+        array2.push(item);
+        return _siftdown(array2, 0, array2.length - 1, cmp);
       };
-      heappop = function(array, cmp) {
+      heappop = function(array2, cmp) {
         var lastelt, returnitem;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        lastelt = array.pop();
-        if (array.length) {
-          returnitem = array[0];
-          array[0] = lastelt;
-          _siftup(array, 0, cmp);
+        lastelt = array2.pop();
+        if (array2.length) {
+          returnitem = array2[0];
+          array2[0] = lastelt;
+          _siftup(array2, 0, cmp);
         } else {
           returnitem = lastelt;
         }
         return returnitem;
       };
-      heapreplace = function(array, item, cmp) {
+      heapreplace = function(array2, item, cmp) {
         var returnitem;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        returnitem = array[0];
-        array[0] = item;
-        _siftup(array, 0, cmp);
+        returnitem = array2[0];
+        array2[0] = item;
+        _siftup(array2, 0, cmp);
         return returnitem;
       };
-      heappushpop = function(array, item, cmp) {
+      heappushpop = function(array2, item, cmp) {
         var _ref;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        if (array.length && cmp(array[0], item) < 0) {
-          _ref = [array[0], item], item = _ref[0], array[0] = _ref[1];
-          _siftup(array, 0, cmp);
+        if (array2.length && cmp(array2[0], item) < 0) {
+          _ref = [array2[0], item], item = _ref[0], array2[0] = _ref[1];
+          _siftup(array2, 0, cmp);
         }
         return item;
       };
-      heapify = function(array, cmp) {
+      heapify = function(array2, cmp) {
         var i2, _i, _j, _len, _ref, _ref1, _results, _results1;
         if (cmp == null) {
           cmp = defaultCmp;
         }
         _ref1 = function() {
           _results1 = [];
-          for (var _j2 = 0, _ref2 = floor(array.length / 2); 0 <= _ref2 ? _j2 < _ref2 : _j2 > _ref2; 0 <= _ref2 ? _j2++ : _j2--) {
+          for (var _j2 = 0, _ref2 = floor(array2.length / 2); 0 <= _ref2 ? _j2 < _ref2 : _j2 > _ref2; 0 <= _ref2 ? _j2++ : _j2--) {
             _results1.push(_j2);
           }
           return _results1;
@@ -20308,51 +20544,51 @@ var require_heap = __commonJS({
         _results = [];
         for (_i = 0, _len = _ref1.length; _i < _len; _i++) {
           i2 = _ref1[_i];
-          _results.push(_siftup(array, i2, cmp));
+          _results.push(_siftup(array2, i2, cmp));
         }
         return _results;
       };
-      updateItem = function(array, item, cmp) {
+      updateItem = function(array2, item, cmp) {
         var pos;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        pos = array.indexOf(item);
+        pos = array2.indexOf(item);
         if (pos === -1) {
           return;
         }
-        _siftdown(array, 0, pos, cmp);
-        return _siftup(array, pos, cmp);
+        _siftdown(array2, 0, pos, cmp);
+        return _siftup(array2, pos, cmp);
       };
-      nlargest = function(array, n, cmp) {
+      nlargest = function(array2, n, cmp) {
         var elem, result, _i, _len, _ref;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        result = array.slice(0, n);
+        result = array2.slice(0, n);
         if (!result.length) {
           return result;
         }
         heapify(result, cmp);
-        _ref = array.slice(n);
+        _ref = array2.slice(n);
         for (_i = 0, _len = _ref.length; _i < _len; _i++) {
           elem = _ref[_i];
           heappushpop(result, elem, cmp);
         }
         return result.sort(cmp).reverse();
       };
-      nsmallest = function(array, n, cmp) {
+      nsmallest = function(array2, n, cmp) {
         var elem, i2, los, result, _i, _j, _len, _ref, _ref1, _results;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        if (n * 10 <= array.length) {
-          result = array.slice(0, n).sort(cmp);
+        if (n * 10 <= array2.length) {
+          result = array2.slice(0, n).sort(cmp);
           if (!result.length) {
             return result;
           }
           los = result[result.length - 1];
-          _ref = array.slice(n);
+          _ref = array2.slice(n);
           for (_i = 0, _len = _ref.length; _i < _len; _i++) {
             elem = _ref[_i];
             if (cmp(elem, los) < 0) {
@@ -20363,51 +20599,51 @@ var require_heap = __commonJS({
           }
           return result;
         }
-        heapify(array, cmp);
+        heapify(array2, cmp);
         _results = [];
-        for (i2 = _j = 0, _ref1 = min(n, array.length); 0 <= _ref1 ? _j < _ref1 : _j > _ref1; i2 = 0 <= _ref1 ? ++_j : --_j) {
-          _results.push(heappop(array, cmp));
+        for (i2 = _j = 0, _ref1 = min(n, array2.length); 0 <= _ref1 ? _j < _ref1 : _j > _ref1; i2 = 0 <= _ref1 ? ++_j : --_j) {
+          _results.push(heappop(array2, cmp));
         }
         return _results;
       };
-      _siftdown = function(array, startpos, pos, cmp) {
+      _siftdown = function(array2, startpos, pos, cmp) {
         var newitem, parent, parentpos;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        newitem = array[pos];
+        newitem = array2[pos];
         while (pos > startpos) {
           parentpos = pos - 1 >> 1;
-          parent = array[parentpos];
+          parent = array2[parentpos];
           if (cmp(newitem, parent) < 0) {
-            array[pos] = parent;
+            array2[pos] = parent;
             pos = parentpos;
             continue;
           }
           break;
         }
-        return array[pos] = newitem;
+        return array2[pos] = newitem;
       };
-      _siftup = function(array, pos, cmp) {
+      _siftup = function(array2, pos, cmp) {
         var childpos, endpos, newitem, rightpos, startpos;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        endpos = array.length;
+        endpos = array2.length;
         startpos = pos;
-        newitem = array[pos];
+        newitem = array2[pos];
         childpos = 2 * pos + 1;
         while (childpos < endpos) {
           rightpos = childpos + 1;
-          if (rightpos < endpos && !(cmp(array[childpos], array[rightpos]) < 0)) {
+          if (rightpos < endpos && !(cmp(array2[childpos], array2[rightpos]) < 0)) {
             childpos = rightpos;
           }
-          array[pos] = array[childpos];
+          array2[pos] = array2[childpos];
           pos = childpos;
           childpos = 2 * pos + 1;
         }
-        array[pos] = newitem;
-        return _siftdown(array, startpos, pos, cmp);
+        array2[pos] = newitem;
+        return _siftdown(array2, startpos, pos, cmp);
       };
       Heap = function() {
         Heap2.push = heappush;
@@ -22320,12 +22556,12 @@ var require_lib = __commonJS({
         }
         return bestMatch;
       }
-      scalarize(array, originals, fuzzyOriginals) {
+      scalarize(array2, originals, fuzzyOriginals) {
         const fuzzyMatches = [];
         if (fuzzyOriginals) {
           const keyScores = {};
-          for (let index4 = 0; index4 < array.length; index4++) {
-            const item = array[index4];
+          for (let index4 = 0; index4 < array2.length; index4++) {
+            const item = array2[index4];
             if (this.isScalar(item)) {
               continue;
             }
@@ -22339,8 +22575,8 @@ var require_lib = __commonJS({
           }
         }
         const result = [];
-        for (let index4 = 0; index4 < array.length; index4++) {
-          const item = array[index4];
+        for (let index4 = 0; index4 < array2.length; index4++) {
+          const item = array2[index4];
           if (this.isScalar(item)) {
             result.push(item);
           } else {
@@ -22562,6 +22798,37 @@ function diffColumns(left, right) {
   );
   return alteredTables;
 }
+function diffPolicies(left, right) {
+  left = JSON.parse(JSON.stringify(left));
+  right = JSON.parse(JSON.stringify(right));
+  const result = (0, import_json_diff.diff)(left, right) ?? {};
+  const alteredTables = Object.fromEntries(
+    Object.entries(result).filter((it) => {
+      return !(it[0].includes("__added") || it[0].includes("__deleted"));
+    }).map((tableEntry) => {
+      const deletedPolicies = Object.entries(tableEntry[1].policies ?? {}).filter((it) => {
+        return it[0].endsWith("__deleted");
+      }).map((it) => {
+        return it[1];
+      });
+      const addedPolicies = Object.entries(tableEntry[1].policies ?? {}).filter((it) => {
+        return it[0].endsWith("__added");
+      }).map((it) => {
+        return it[1];
+      });
+      tableEntry[1].policies = {
+        added: addedPolicies,
+        deleted: deletedPolicies
+      };
+      const table4 = left[tableEntry[0]];
+      return [
+        tableEntry[0],
+        { name: table4.name, schema: table4.schema, ...tableEntry[1] }
+      ];
+    })
+  );
+  return alteredTables;
+}
 function applyJsonDiff(json1, json2) {
   json1 = JSON.parse(JSON.stringify(json1));
   json2 = JSON.parse(JSON.stringify(json2));
@@ -22571,6 +22838,7 @@ function applyJsonDiff(json1, json2) {
   difference.tables = difference.tables || {};
   difference.enums = difference.enums || {};
   difference.sequences = difference.sequences || {};
+  difference.roles = difference.roles || {};
   const schemaKeys = Object.keys(difference.schemas);
   for (let key of schemaKeys) {
     if (key.endsWith("__added") || key.endsWith("__deleted")) {
@@ -22626,6 +22894,10 @@ function applyJsonDiff(json1, json2) {
   const alteredSequences = sequencesEntries.filter((it) => !(it[0].includes("__added") || it[0].includes("__deleted")) && "values" in it[1]).map((it) => {
     return json2.sequences[it[0]];
   });
+  const rolesEntries = Object.entries(difference.roles);
+  const alteredRoles = rolesEntries.filter((it) => !(it[0].includes("__added") || it[0].includes("__deleted"))).map((it) => {
+    return json2.roles[it[0]];
+  });
   const alteredTablesWithColumns = Object.values(difference.tables).map(
     (table4) => {
       return findAlternationsInTable(table4);
@@ -22634,7 +22906,8 @@ function applyJsonDiff(json1, json2) {
   return {
     alteredTablesWithColumns,
     alteredEnums,
-    alteredSequences
+    alteredSequences,
+    alteredRoles
   };
 }
 var import_json_diff, mapArraysDiff, findAlternationsInTable, alternationsInColumn;
@@ -22694,6 +22967,21 @@ var init_jsonDiffer = __esm({
           return !it[0].endsWith("__deleted") && !it[0].endsWith("__added");
         })
       );
+      const deletedPolicies = Object.fromEntries(
+        Object.entries(table4.policies__deleted || {}).concat(
+          Object.entries(table4.policies || {}).filter((it) => it[0].includes("__deleted"))
+        ).map((entry) => [entry[0].replace("__deleted", ""), entry[1]])
+      );
+      const addedPolicies = Object.fromEntries(
+        Object.entries(table4.policies__added || {}).concat(
+          Object.entries(table4.policies || {}).filter((it) => it[0].includes("__added"))
+        ).map((entry) => [entry[0].replace("__added", ""), entry[1]])
+      );
+      const alteredPolicies = Object.fromEntries(
+        Object.entries(table4.policies || {}).filter((it) => {
+          return !it[0].endsWith("__deleted") && !it[0].endsWith("__added");
+        })
+      );
       const deletedForeignKeys = Object.fromEntries(
         Object.entries(table4.foreignKeys__deleted || {}).concat(
           Object.entries(table4.foreignKeys || {}).filter((it) => it[0].includes("__deleted"))
@@ -22755,7 +23043,10 @@ var init_jsonDiffer = __esm({
         alteredCompositePKs,
         addedUniqueConstraints,
         deletedUniqueConstraints,
-        alteredUniqueConstraints
+        alteredUniqueConstraints,
+        deletedPolicies,
+        addedPolicies,
+        alteredPolicies
       };
     };
     alternationsInColumn = (column7) => {
@@ -23029,7 +23320,7 @@ function fromJson(statements, dialect7, action, json2) {
   }).filter((it) => it !== "");
   return result;
 }
-var pgNativeTypes, isPgNativeType, Convertor, PgCreateTableConvertor, MySqlCreateTableConvertor, SQLiteCreateTableConvertor, PgAlterTableAlterColumnSetGenerated, PgAlterTableAlterColumnDropGenerated, PgAlterTableAlterColumnAlterGenerated, PgAlterTableAddUniqueConstraintConvertor, PgAlterTableDropUniqueConstraintConvertor, MySQLAlterTableAddUniqueConstraintConvertor, MySQLAlterTableDropUniqueConstraintConvertor, CreatePgSequenceConvertor, DropPgSequenceConvertor, RenamePgSequenceConvertor, MovePgSequenceConvertor, AlterPgSequenceConvertor, CreateTypeEnumConvertor, AlterTypeAddValueConvertor, PgDropTableConvertor, MySQLDropTableConvertor, SQLiteDropTableConvertor, PgRenameTableConvertor, SqliteRenameTableConvertor, MySqlRenameTableConvertor, PgAlterTableRenameColumnConvertor, MySqlAlterTableRenameColumnConvertor, SQLiteAlterTableRenameColumnConvertor, PgAlterTableDropColumnConvertor, MySqlAlterTableDropColumnConvertor, SQLiteAlterTableDropColumnConvertor, PgAlterTableAddColumnConvertor, MySqlAlterTableAddColumnConvertor, SQLiteAlterTableAddColumnConvertor, PgAlterTableAlterColumnSetTypeConvertor, PgAlterTableAlterColumnSetDefaultConvertor, PgAlterTableAlterColumnDropDefaultConvertor, PgAlterTableAlterColumnDropGeneratedConvertor, PgAlterTableAlterColumnSetExpressionConvertor, PgAlterTableAlterColumnAlterrGeneratedConvertor, SqliteAlterTableAlterColumnDropGeneratedConvertor, SqliteAlterTableAlterColumnSetExpressionConvertor, SqliteAlterTableAlterColumnAlterGeneratedConvertor, MySqlAlterTableAlterColumnAlterrGeneratedConvertor, MySqlAlterTableAddPk, MySqlAlterTableDropPk, LibSQLModifyColumn, MySqlModifyColumn, PgAlterTableCreateCompositePrimaryKeyConvertor, PgAlterTableDeleteCompositePrimaryKeyConvertor, PgAlterTableAlterCompositePrimaryKeyConvertor, MySqlAlterTableCreateCompositePrimaryKeyConvertor, MySqlAlterTableDeleteCompositePrimaryKeyConvertor, MySqlAlterTableAlterCompositePrimaryKeyConvertor, PgAlterTableAlterColumnSetPrimaryKeyConvertor, PgAlterTableAlterColumnDropPrimaryKeyConvertor, PgAlterTableAlterColumnSetNotNullConvertor, PgAlterTableAlterColumnDropNotNullConvertor, PgCreateForeignKeyConvertor, LibSQLCreateForeignKeyConvertor, MySqlCreateForeignKeyConvertor, PgAlterForeignKeyConvertor, PgDeleteForeignKeyConvertor, MySqlDeleteForeignKeyConvertor, CreatePgIndexConvertor, CreateMySqlIndexConvertor, CreateSqliteIndexConvertor, PgDropIndexConvertor, PgCreateSchemaConvertor, PgRenameSchemaConvertor, PgDropSchemaConvertor, PgAlterTableSetSchemaConvertor, PgAlterTableSetNewSchemaConvertor, PgAlterTableRemoveFromSchemaConvertor, SqliteDropIndexConvertor, MySqlDropIndexConvertor, SQLiteRecreateTableConvertor, LibSQLRecreateTableConvertor, convertors;
+var pgNativeTypes, isPgNativeType, Convertor, PgCreateRoleConvertor, PgDropRoleConvertor, PgRenameRoleConvertor, PgAlterRoleConvertor, PgCreatePolicyConvertor, PgDropPolicyConvertor, PgRenamePolicyConvertor, PgAlterPolicyConvertor, PgEnableRlsConvertor, PgDisableRlsConvertor, PgCreateTableConvertor, MySqlCreateTableConvertor, SQLiteCreateTableConvertor, PgAlterTableAlterColumnSetGenerated, PgAlterTableAlterColumnDropGenerated, PgAlterTableAlterColumnAlterGenerated, PgAlterTableAddUniqueConstraintConvertor, PgAlterTableDropUniqueConstraintConvertor, MySQLAlterTableAddUniqueConstraintConvertor, MySQLAlterTableDropUniqueConstraintConvertor, CreatePgSequenceConvertor, DropPgSequenceConvertor, RenamePgSequenceConvertor, MovePgSequenceConvertor, AlterPgSequenceConvertor, CreateTypeEnumConvertor, AlterTypeAddValueConvertor, PgDropTableConvertor, MySQLDropTableConvertor, SQLiteDropTableConvertor, PgRenameTableConvertor, SqliteRenameTableConvertor, MySqlRenameTableConvertor, PgAlterTableRenameColumnConvertor, MySqlAlterTableRenameColumnConvertor, SQLiteAlterTableRenameColumnConvertor, PgAlterTableDropColumnConvertor, MySqlAlterTableDropColumnConvertor, SQLiteAlterTableDropColumnConvertor, PgAlterTableAddColumnConvertor, MySqlAlterTableAddColumnConvertor, SQLiteAlterTableAddColumnConvertor, PgAlterTableAlterColumnSetTypeConvertor, PgAlterTableAlterColumnSetDefaultConvertor, PgAlterTableAlterColumnDropDefaultConvertor, PgAlterTableAlterColumnDropGeneratedConvertor, PgAlterTableAlterColumnSetExpressionConvertor, PgAlterTableAlterColumnAlterrGeneratedConvertor, SqliteAlterTableAlterColumnDropGeneratedConvertor, SqliteAlterTableAlterColumnSetExpressionConvertor, SqliteAlterTableAlterColumnAlterGeneratedConvertor, MySqlAlterTableAlterColumnAlterrGeneratedConvertor, MySqlAlterTableAddPk, MySqlAlterTableDropPk, LibSQLModifyColumn, MySqlModifyColumn, PgAlterTableCreateCompositePrimaryKeyConvertor, PgAlterTableDeleteCompositePrimaryKeyConvertor, PgAlterTableAlterCompositePrimaryKeyConvertor, MySqlAlterTableCreateCompositePrimaryKeyConvertor, MySqlAlterTableDeleteCompositePrimaryKeyConvertor, MySqlAlterTableAlterCompositePrimaryKeyConvertor, PgAlterTableAlterColumnSetPrimaryKeyConvertor, PgAlterTableAlterColumnDropPrimaryKeyConvertor, PgAlterTableAlterColumnSetNotNullConvertor, PgAlterTableAlterColumnDropNotNullConvertor, PgCreateForeignKeyConvertor, LibSQLCreateForeignKeyConvertor, MySqlCreateForeignKeyConvertor, PgAlterForeignKeyConvertor, PgDeleteForeignKeyConvertor, MySqlDeleteForeignKeyConvertor, CreatePgIndexConvertor, CreateMySqlIndexConvertor, CreateSqliteIndexConvertor, PgDropIndexConvertor, PgCreateSchemaConvertor, PgRenameSchemaConvertor, PgDropSchemaConvertor, PgAlterTableSetSchemaConvertor, PgAlterTableSetNewSchemaConvertor, PgAlterTableRemoveFromSchemaConvertor, SqliteDropIndexConvertor, MySqlDropIndexConvertor, SQLiteRecreateTableConvertor, LibSQLRecreateTableConvertor, convertors;
 var init_sqlgenerator = __esm({
   "src/sqlgenerator.ts"() {
     "use strict";
@@ -23086,12 +23377,110 @@ var init_sqlgenerator = __esm({
     };
     Convertor = class {
     };
+    PgCreateRoleConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "create_role" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        return `CREATE ROLE "${statement.name}"${statement.values.createDb || statement.values.createRole || !statement.values.inherit ? ` WITH${statement.values.createDb ? " CREATEDB" : ""}${statement.values.createRole ? " CREATEROLE" : ""}${statement.values.inherit ? "" : " NOINHERIT"}` : ""};`;
+      }
+    };
+    PgDropRoleConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "drop_role" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        return `DROP ROLE "${statement.name}";`;
+      }
+    };
+    PgRenameRoleConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "rename_role" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        return `ALTER ROLE "${statement.nameFrom}" RENAME TO "${statement.nameTo}";`;
+      }
+    };
+    PgAlterRoleConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "alter_role" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        return `ALTER ROLE "${statement.name}"${` WITH${statement.values.createDb ? " CREATEDB" : " NOCREATEDB"}${statement.values.createRole ? " CREATEROLE" : " NOCREATEROLE"}${statement.values.inherit ? " INHERIT" : " NOINHERIT"}`};`;
+      }
+    };
+    PgCreatePolicyConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "create_policy" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        var _a, _b, _c;
+        const policy2 = statement.data;
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        const usingPart = policy2.using ? ` USING (${policy2.using})` : "";
+        const withCheckPart = policy2.withCheck ? ` WITH CHECK (${policy2.withCheck})` : "";
+        const policyToPart = (_a = policy2.to) == null ? void 0 : _a.map(
+          (v) => ["current_user", "current_role", "session_user", "public"].includes(v) ? v : `"${v}"`
+        ).join(", ");
+        return `CREATE POLICY "${policy2.name}" ON ${tableNameWithSchema} AS ${(_b = policy2.as) == null ? void 0 : _b.toUpperCase()} FOR ${(_c = policy2.for) == null ? void 0 : _c.toUpperCase()} TO ${policyToPart}${usingPart}${withCheckPart};`;
+      }
+    };
+    PgDropPolicyConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "drop_policy" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        const policy2 = statement.data;
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        return `DROP POLICY "${policy2.name}" ON ${tableNameWithSchema} CASCADE;`;
+      }
+    };
+    PgRenamePolicyConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "rename_policy" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        return `ALTER POLICY "${statement.oldName}" ON ${tableNameWithSchema} RENAME TO "${statement.newName}";`;
+      }
+    };
+    PgAlterPolicyConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "alter_policy" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        const newPolicy = PgSquasher.unsquashPolicy(statement.newData);
+        const oldPolicy = PgSquasher.unsquashPolicy(statement.oldData);
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        const usingPart = newPolicy.using ? ` USING (${newPolicy.using})` : oldPolicy.using ? ` USING (${oldPolicy.using})` : "";
+        const withCheckPart = newPolicy.withCheck ? ` WITH CHECK (${newPolicy.withCheck})` : oldPolicy.withCheck ? ` WITH CHECK  (${oldPolicy.withCheck})` : "";
+        return `ALTER POLICY "${oldPolicy.name}" ON ${tableNameWithSchema} TO ${newPolicy.to}${usingPart}${withCheckPart};`;
+      }
+    };
+    PgEnableRlsConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "enable_rls" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        return `ALTER TABLE ${tableNameWithSchema} ENABLE ROW LEVEL SECURITY;`;
+      }
+    };
+    PgDisableRlsConvertor = class extends Convertor {
+      can(statement, dialect7) {
+        return statement.type === "disable_rls" && dialect7 === "postgresql";
+      }
+      convert(statement) {
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        return `ALTER TABLE ${tableNameWithSchema} DISABLE ROW LEVEL SECURITY;`;
+      }
+    };
     PgCreateTableConvertor = class extends Convertor {
       can(statement, dialect7) {
         return statement.type === "create_table" && dialect7 === "postgresql";
       }
       convert(st) {
-        const { tableName, schema: schema5, columns, compositePKs, uniqueConstraints } = st;
+        const { tableName, schema: schema5, columns, compositePKs, uniqueConstraints, policies } = st;
         let statement = "";
         const name = schema5 ? `"${schema5}"."${tableName}"` : `"${tableName}"`;
         statement += `CREATE TABLE IF NOT EXISTS ${name} (
@@ -23128,7 +23517,12 @@ var init_sqlgenerator = __esm({
 );`;
         statement += `
 `;
-        return statement;
+        const enableRls = new PgEnableRlsConvertor().convert({
+          type: "enable_rls",
+          tableName,
+          schema: schema5
+        });
+        return [statement, ...policies && policies.length > 0 ? [enableRls] : []];
       }
     };
     MySqlCreateTableConvertor = class extends Convertor {
@@ -23445,9 +23839,21 @@ var init_sqlgenerator = __esm({
         return statement.type === "drop_table" && dialect7 === "postgresql";
       }
       convert(statement) {
-        const { tableName, schema: schema5 } = statement;
+        const { tableName, schema: schema5, policies } = statement;
         const tableNameWithSchema = schema5 ? `"${schema5}"."${tableName}"` : `"${tableName}"`;
-        return `DROP TABLE ${tableNameWithSchema};`;
+        const dropPolicyConvertor = new PgDropPolicyConvertor();
+        const droppedPolicies = (policies == null ? void 0 : policies.map((p2) => {
+          return dropPolicyConvertor.convert({
+            type: "drop_policy",
+            tableName,
+            data: PgSquasher.unsquashPolicy(p2),
+            schema: schema5
+          });
+        })) ?? [];
+        return [
+          ...droppedPolicies,
+          `DROP TABLE ${tableNameWithSchema};`
+        ];
       }
     };
     MySQLDropTableConvertor = class extends Convertor {
@@ -24622,6 +25028,16 @@ ${BREAKPOINT}ALTER TABLE ${tableNameWithSchema} ADD CONSTRAINT ${statement.newCo
     convertors.push(new PgAlterTableAlterColumnDropNotNullConvertor());
     convertors.push(new PgAlterTableAlterColumnSetDefaultConvertor());
     convertors.push(new PgAlterTableAlterColumnDropDefaultConvertor());
+    convertors.push(new PgAlterPolicyConvertor());
+    convertors.push(new PgCreatePolicyConvertor());
+    convertors.push(new PgDropPolicyConvertor());
+    convertors.push(new PgRenamePolicyConvertor());
+    convertors.push(new PgEnableRlsConvertor());
+    convertors.push(new PgDisableRlsConvertor());
+    convertors.push(new PgDropRoleConvertor());
+    convertors.push(new PgAlterRoleConvertor());
+    convertors.push(new PgCreateRoleConvertor());
+    convertors.push(new PgRenameRoleConvertor());
     convertors.push(new PgAlterTableAlterColumnSetExpressionConvertor());
     convertors.push(new PgAlterTableAlterColumnDropGeneratedConvertor());
     convertors.push(new PgAlterTableAlterColumnAlterrGeneratedConvertor());
@@ -24917,7 +25333,7 @@ var init_sqlitePushUtils = __esm({
 });
 
 // src/jsonStatements.ts
-var preparePgCreateTableJson, prepareMySqlCreateTableJson, prepareSQLiteCreateTable, prepareDropTableJson, prepareRenameTableJson, prepareCreateEnumJson, prepareAddValuesToEnumJson, prepareDropEnumJson, prepareMoveEnumJson, prepareRenameEnumJson, prepareCreateSequenceJson, prepareAlterSequenceJson, prepareDropSequenceJson, prepareMoveSequenceJson, prepareRenameSequenceJson, prepareCreateSchemasJson, prepareRenameSchemasJson, prepareDeleteSchemasJson, prepareRenameColumns, _prepareDropColumns, _prepareAddColumns, _prepareSqliteAddColumns, prepareAlterColumnsMysql, preparePgAlterColumns, prepareSqliteAlterColumns, preparePgCreateIndexesJson, prepareCreateIndexesJson, prepareCreateReferencesJson, prepareLibSQLCreateReferencesJson, prepareDropReferencesJson, prepareLibSQLDropReferencesJson, prepareAlterReferencesJson, prepareDropIndexesJson, prepareAddCompositePrimaryKeySqlite, prepareDeleteCompositePrimaryKeySqlite, prepareAlterCompositePrimaryKeySqlite, prepareAddCompositePrimaryKeyPg, prepareDeleteCompositePrimaryKeyPg, prepareAlterCompositePrimaryKeyPg, prepareAddUniqueConstraintPg, prepareDeleteUniqueConstraintPg, prepareAddCompositePrimaryKeyMySql, prepareDeleteCompositePrimaryKeyMySql, prepareAlterCompositePrimaryKeyMySql;
+var preparePgCreateTableJson, prepareMySqlCreateTableJson, prepareSQLiteCreateTable, prepareDropTableJson, prepareRenameTableJson, prepareCreateEnumJson, prepareAddValuesToEnumJson, prepareDropEnumJson, prepareMoveEnumJson, prepareRenameEnumJson, prepareCreateSequenceJson, prepareAlterSequenceJson, prepareDropSequenceJson, prepareMoveSequenceJson, prepareRenameSequenceJson, prepareCreateRoleJson, prepareAlterRoleJson, prepareDropRoleJson, prepareRenameRoleJson, prepareCreateSchemasJson, prepareRenameSchemasJson, prepareDeleteSchemasJson, prepareRenameColumns, _prepareDropColumns, _prepareAddColumns, _prepareSqliteAddColumns, prepareAlterColumnsMysql, preparePgAlterColumns, prepareSqliteAlterColumns, prepareRenamePolicyJsons, prepareCreatePolicyJsons, prepareDropPolicyJsons, prepareAlterPolicyJson, preparePgCreateIndexesJson, prepareCreateIndexesJson, prepareCreateReferencesJson, prepareLibSQLCreateReferencesJson, prepareDropReferencesJson, prepareLibSQLDropReferencesJson, prepareAlterReferencesJson, prepareDropIndexesJson, prepareAddCompositePrimaryKeySqlite, prepareDeleteCompositePrimaryKeySqlite, prepareAlterCompositePrimaryKeySqlite, prepareAddCompositePrimaryKeyPg, prepareDeleteCompositePrimaryKeyPg, prepareAlterCompositePrimaryKeyPg, prepareAddUniqueConstraintPg, prepareDeleteUniqueConstraintPg, prepareAddCompositePrimaryKeyMySql, prepareDeleteCompositePrimaryKeyMySql, prepareAlterCompositePrimaryKeyMySql;
 var init_jsonStatements = __esm({
   "src/jsonStatements.ts"() {
     "use strict";
@@ -24928,7 +25344,7 @@ var init_jsonStatements = __esm({
     init_pgSchema();
     init_sqliteSchema();
     preparePgCreateTableJson = (table4, json2) => {
-      const { name, schema: schema5, columns, compositePrimaryKeys, uniqueConstraints } = table4;
+      const { name, schema: schema5, columns, compositePrimaryKeys, uniqueConstraints, policies } = table4;
       const tableKey2 = `${schema5 || "public"}.${name}`;
       const compositePkName = Object.values(compositePrimaryKeys).length > 0 ? json2.tables[tableKey2].compositePrimaryKeys[`${PgSquasher.unsquashPK(Object.values(compositePrimaryKeys)[0]).name}`].name : "";
       return {
@@ -24938,7 +25354,8 @@ var init_jsonStatements = __esm({
         columns: Object.values(columns),
         compositePKs: Object.values(compositePrimaryKeys),
         compositePkName,
-        uniqueConstraints: Object.values(uniqueConstraints)
+        uniqueConstraints: Object.values(uniqueConstraints),
+        policies: Object.values(policies)
       };
     };
     prepareMySqlCreateTableJson = (table4, json2, internals) => {
@@ -24976,7 +25393,8 @@ var init_jsonStatements = __esm({
       return {
         type: "drop_table",
         tableName: table4.name,
-        schema: table4.schema
+        schema: table4.schema,
+        policies: table4.policies ? Object.values(table4.policies) : []
       };
     };
     prepareRenameTableJson = (tableFrom, tableTo) => {
@@ -25073,6 +25491,41 @@ var init_jsonStatements = __esm({
         schema: schema5
       };
     };
+    prepareCreateRoleJson = (role) => {
+      return {
+        type: "create_role",
+        name: role.name,
+        values: {
+          createDb: role.createDb,
+          createRole: role.createRole,
+          inherit: role.inherit
+        }
+      };
+    };
+    prepareAlterRoleJson = (role) => {
+      return {
+        type: "alter_role",
+        name: role.name,
+        values: {
+          createDb: role.createDb,
+          createRole: role.createRole,
+          inherit: role.inherit
+        }
+      };
+    };
+    prepareDropRoleJson = (name) => {
+      return {
+        type: "drop_role",
+        name
+      };
+    };
+    prepareRenameRoleJson = (nameFrom, nameTo) => {
+      return {
+        type: "rename_role",
+        nameFrom,
+        nameTo
+      };
+    };
     prepareCreateSchemasJson = (values) => {
       return values.map((it) => {
         return {
@@ -25973,6 +26426,46 @@ var init_jsonStatements = __esm({
       }
       return [...dropPkStatements, ...setPkStatements, ...statements];
     };
+    prepareRenamePolicyJsons = (tableName, schema5, renames) => {
+      return renames.map((it) => {
+        return {
+          type: "rename_policy",
+          tableName,
+          oldName: it.from.name,
+          newName: it.to.name,
+          schema: schema5
+        };
+      });
+    };
+    prepareCreatePolicyJsons = (tableName, schema5, policies) => {
+      return policies.map((it) => {
+        return {
+          type: "create_policy",
+          tableName,
+          data: it,
+          schema: schema5
+        };
+      });
+    };
+    prepareDropPolicyJsons = (tableName, schema5, policies) => {
+      return policies.map((it) => {
+        return {
+          type: "drop_policy",
+          tableName,
+          data: it,
+          schema: schema5
+        };
+      });
+    };
+    prepareAlterPolicyJson = (tableName, schema5, oldPolicy, newPolicy) => {
+      return {
+        type: "alter_policy",
+        tableName,
+        oldData: oldPolicy,
+        newData: newPolicy,
+        schema: schema5
+      };
+    };
     preparePgCreateIndexesJson = (tableName, schema5, indexes, fullSchema, action) => {
       if (action === "push") {
         return Object.values(indexes).map((indexData) => {
@@ -26646,7 +27139,8 @@ var init_snapshotsDiffer = __esm({
       indexes: recordType(stringType(), stringType()),
       foreignKeys: recordType(stringType(), stringType()),
       compositePrimaryKeys: recordType(stringType(), stringType()).default({}),
-      uniqueConstraints: recordType(stringType(), stringType()).default({})
+      uniqueConstraints: recordType(stringType(), stringType()).default({}),
+      policies: recordType(stringType(), stringType()).default({})
     }).strict();
     alteredTableScheme = objectType({
       name: stringType(),
@@ -26687,12 +27181,22 @@ var init_snapshotsDiffer = __esm({
           __new: stringType(),
           __old: stringType()
         })
+      ),
+      addedPolicies: recordType(stringType(), stringType()),
+      deletedPolicies: recordType(stringType(), stringType()),
+      alteredPolicies: recordType(
+        stringType(),
+        objectType({
+          __new: stringType(),
+          __old: stringType()
+        })
       )
     }).strict();
     diffResultScheme = objectType({
       alteredTablesWithColumns: alteredTableScheme.array(),
       alteredEnums: changedEnumSchema.array(),
-      alteredSequences: sequenceSquashed.array()
+      alteredSequences: sequenceSquashed.array(),
+      alteredRoles: roleSchema.array()
     }).strict();
     diffResultSchemeMysql = objectType({
       alteredTablesWithColumns: alteredTableScheme.array(),
@@ -26747,7 +27251,7 @@ var init_snapshotsDiffer = __esm({
       }
       return column7;
     };
-    applyPgSnapshotsDiff = async (json1, json2, schemasResolver2, enumsResolver2, sequencesResolver2, tablesResolver2, columnsResolver2, prevFull, curFull, action) => {
+    applyPgSnapshotsDiff = async (json1, json2, schemasResolver2, enumsResolver2, sequencesResolver2, policyResolver2, roleResolver2, tablesResolver2, columnsResolver2, prevFull, curFull, action) => {
       const schemasDiff = diffSchemasOrTables(json1.schemas, json2.schemas);
       const {
         created: createdSchemas,
@@ -26897,6 +27401,47 @@ var init_snapshotsDiffer = __esm({
           return [tableKey2, tableValue];
         }
       );
+      const rolesDiff = diffSchemasOrTables(
+        schemasPatchedSnap1.roles,
+        json2.roles
+      );
+      const {
+        created: createdRoles,
+        deleted: deletedRoles,
+        renamed: renamedRoles
+      } = await roleResolver2({
+        created: rolesDiff.added,
+        deleted: rolesDiff.deleted
+      });
+      schemasPatchedSnap1.roles = mapEntries(
+        schemasPatchedSnap1.roles,
+        (_2, it) => {
+          const { name } = nameChangeFor(it, renamedRoles);
+          it.name = name;
+          return [name, it];
+        }
+      );
+      const rolesChangeMap = renamedRoles.reduce(
+        (acc, it) => {
+          acc[it.from.name] = {
+            nameFrom: it.from.name,
+            nameTo: it.to.name
+          };
+          return acc;
+        },
+        {}
+      );
+      schemasPatchedSnap1.roles = mapEntries(
+        schemasPatchedSnap1.roles,
+        (roleKey, roleValue) => {
+          const key = roleKey;
+          const change = rolesChangeMap[key];
+          if (change) {
+            roleValue.name = change.nameTo;
+          }
+          return [roleKey, roleValue];
+        }
+      );
       const tablesDiff = diffSchemasOrTables(
         schemasPatchedSnap1.tables,
         json2.tables
@@ -26975,6 +27520,65 @@ var init_snapshotsDiffer = __esm({
           return [tableKey2, tableValue];
         }
       );
+      const policyRes = diffPolicies(tablesPatchedSnap1.tables, json2.tables);
+      const policyRenames = [];
+      const policyCreates = [];
+      const policyDeletes = [];
+      for (let entry of Object.values(policyRes)) {
+        const { renamed, created, deleted } = await policyResolver2({
+          tableName: entry.name,
+          schema: entry.schema,
+          deleted: entry.policies.deleted.map(PgSquasher.unsquashPolicy),
+          created: entry.policies.added.map(PgSquasher.unsquashPolicy)
+        });
+        if (created.length > 0) {
+          policyCreates.push({
+            table: entry.name,
+            schema: entry.schema,
+            columns: created
+          });
+        }
+        if (deleted.length > 0) {
+          policyDeletes.push({
+            table: entry.name,
+            schema: entry.schema,
+            columns: deleted
+          });
+        }
+        if (renamed.length > 0) {
+          policyRenames.push({
+            table: entry.name,
+            schema: entry.schema,
+            renames: renamed
+          });
+        }
+      }
+      const policyRenamesDict = columnRenames.reduce(
+        (acc, it) => {
+          acc[`${it.schema || "public"}.${it.table}`] = it.renames;
+          return acc;
+        },
+        {}
+      );
+      const policyPatchedSnap1 = copy(tablesPatchedSnap1);
+      policyPatchedSnap1.tables = mapEntries(
+        policyPatchedSnap1.tables,
+        (tableKey2, tableValue) => {
+          const patchedPolicies = mapKeys(
+            tableValue.policies,
+            (policyKey, policy2) => {
+              const rens = policyRenamesDict[`${tableValue.schema || "public"}.${tableValue.name}`] || [];
+              const newName = columnChangeFor(policyKey, rens);
+              const unsquashedPolicy = PgSquasher.unsquashPolicy(policy2);
+              unsquashedPolicy.name = newName;
+              policy2 = PgSquasher.squashPolicy(unsquashedPolicy);
+              return newName;
+            }
+          );
+          tableValue.policies = patchedPolicies;
+          return [tableKey2, tableValue];
+        }
+      );
       const diffResult = applyJsonDiff(columnsPatchedSnap1, json2);
       const typedResult = diffResultScheme.parse(diffResult);
       const jsonStatements = [];
@@ -27130,7 +27734,99 @@ var init_snapshotsDiffer = __esm({
           it.deletedIndexes || {}
         );
       }).flat();
+      const jsonCreatePoliciesStatements = [];
+      const jsonDropPoliciesStatements = [];
+      const jsonAlterPoliciesStatements = [];
+      const jsonRenamePoliciesStatements = [];
+      const jsonEnableRLSStatements = [];
+      const jsonDisableRLSStatements = [];
+      for (let it of policyRenames) {
+        jsonRenamePoliciesStatements.push(
+          ...prepareRenamePolicyJsons(it.table, it.schema, it.renames)
+        );
+      }
+      for (const it of policyCreates) {
+        jsonCreatePoliciesStatements.push(
+          ...prepareCreatePolicyJsons(
+            it.table,
+            it.schema,
+            it.columns
+          )
+        );
+      }
+      for (const it of policyDeletes) {
+        jsonDropPoliciesStatements.push(
+          ...prepareDropPolicyJsons(
+            it.table,
+            it.schema,
+            it.columns
+          )
+        );
+      }
       alteredTables.forEach((it) => {
+        Object.keys(it.alteredPolicies).forEach((policyName) => {
+          const newPolicy = PgSquasher.unsquashPolicy(it.alteredPolicies[policyName].__new);
+          const oldPolicy = PgSquasher.unsquashPolicy(it.alteredPolicies[policyName].__old);
+          if (newPolicy.as !== oldPolicy.as) {
+            jsonDropPoliciesStatements.push(
+              ...prepareDropPolicyJsons(
+                it.name,
+                it.schema,
+                [oldPolicy]
+              )
+            );
+            jsonCreatePoliciesStatements.push(
+              ...prepareCreatePolicyJsons(
+                it.name,
+                it.schema,
+                [newPolicy]
+              )
+            );
+            return;
+          }
+          if (newPolicy.for !== oldPolicy.for) {
+            jsonDropPoliciesStatements.push(
+              ...prepareDropPolicyJsons(
+                it.name,
+                it.schema,
+                [oldPolicy]
+              )
+            );
+            jsonCreatePoliciesStatements.push(
+              ...prepareCreatePolicyJsons(
+                it.name,
+                it.schema,
+                [newPolicy]
+              )
+            );
+            return;
+          }
+          jsonAlterPoliciesStatements.push(
+            prepareAlterPolicyJson(
+              it.name,
+              it.schema,
+              it.alteredPolicies[policyName].__old,
+              it.alteredPolicies[policyName].__new
+            )
+          );
+        });
+        for (const table4 of Object.values(json2.tables)) {
+          const policiesInCurrentState = Object.keys(table4.policies);
+          const tableInPreviousState = columnsPatchedSnap1.tables[`${table4.schema === "" ? "public" : table4.schema}.${table4.name}`];
+          const policiesInPreviousState = tableInPreviousState ? Object.keys(tableInPreviousState.policies) : [];
+          if (policiesInPreviousState.length === 0 && policiesInCurrentState.length > 0) {
+            jsonEnableRLSStatements.push({ type: "enable_rls", tableName: table4.name, schema: table4.schema });
+          }
+          if (policiesInPreviousState.length > 0 && policiesInCurrentState.length === 0) {
+            jsonDisableRLSStatements.push({ type: "disable_rls", tableName: table4.name, schema: table4.schema });
+          }
+        }
+        for (const table4 of Object.values(columnsPatchedSnap1.tables)) {
+          const tableInCurrentState = json2.tables[`${table4.schema === "" ? "public" : table4.schema}.${table4.name}`];
+          if (tableInCurrentState === void 0) {
+            jsonDisableRLSStatements.push({ type: "disable_rls", tableName: table4.name, schema: table4.schema });
+          }
+        }
         const droppedIndexes = Object.keys(it.alteredIndexes).reduce(
           (current, item) => {
             current[item] = it.alteredIndexes[item].__old;
@@ -27215,6 +27911,18 @@ var init_snapshotsDiffer = __esm({
       const jsonAlterSequences = typedResult.alteredSequences.map((it) => {
         return prepareAlterSequenceJson(it);
       }).flat() ?? [];
+      const createRoles = createdRoles.map((it) => {
+        return prepareCreateRoleJson(it);
+      }) ?? [];
+      const dropRoles = deletedRoles.map((it) => {
+        return prepareDropRoleJson(it.name);
+      });
+      const renameRoles = renamedRoles.map((it) => {
+        return prepareRenameRoleJson(it.from.name, it.to.name);
+      });
+      const jsonAlterRoles = typedResult.alteredRoles.map((it) => {
+        return prepareAlterRoleJson(it);
+      }).flat() ?? [];
       const createSchemas = prepareCreateSchemasJson(
         createdSchemas.map((it) => it.name)
       );
@@ -27227,6 +27935,11 @@ var init_snapshotsDiffer = __esm({
       const createTables = createdTables.map((it) => {
         return preparePgCreateTableJson(it, curFull);
       });
+      jsonCreatePoliciesStatements.push(...[].concat(
+        ...createdTables.map(
+          (it) => prepareCreatePolicyJsons(it.name, it.schema, Object.values(it.policies).map(PgSquasher.unsquashPolicy))
+        )
+      ));
       jsonStatements.push(...createSchemas);
       jsonStatements.push(...renameSchemas);
       jsonStatements.push(...createEnums);
@@ -27237,7 +27950,13 @@ var init_snapshotsDiffer = __esm({
       jsonStatements.push(...moveSequences);
       jsonStatements.push(...renameSequences);
       jsonStatements.push(...jsonAlterSequences);
+      jsonStatements.push(...renameRoles);
+      jsonStatements.push(...dropRoles);
+      jsonStatements.push(...createRoles);
+      jsonStatements.push(...jsonAlterRoles);
       jsonStatements.push(...createTables);
+      jsonStatements.push(...jsonEnableRLSStatements);
+      jsonStatements.push(...jsonDisableRLSStatements);
       jsonStatements.push(...jsonDropTables);
       jsonStatements.push(...jsonSetTableSchemas);
       jsonStatements.push(...jsonRenameTables);
@@ -27257,6 +27976,10 @@ var init_snapshotsDiffer = __esm({
       jsonStatements.push(...jsonAlteredCompositePKs);
       jsonStatements.push(...jsonAddedUniqueConstraints);
       jsonStatements.push(...jsonAlteredUniqueConstraints);
+      jsonStatements.push(...jsonRenamePoliciesStatements);
+      jsonStatements.push(...jsonDropPoliciesStatements);
+      jsonStatements.push(...jsonCreatePoliciesStatements);
+      jsonStatements.push(...jsonAlterPoliciesStatements);
       jsonStatements.push(...dropEnums);
       jsonStatements.push(...dropSequences);
       jsonStatements.push(...dropSchemas);
@@ -29520,6 +30243,7 @@ __export(migrate_exports, {
   columnsResolver: () => columnsResolver,
   embeddedMigrations: () => embeddedMigrations,
   enumsResolver: () => enumsResolver,
+  policyResolver: () => policyResolver,
   prepareAndMigrateLibSQL: () => prepareAndMigrateLibSQL,
   prepareAndMigrateMysql: () => prepareAndMigrateMysql,
   prepareAndMigratePg: () => prepareAndMigratePg,
@@ -29530,14 +30254,16 @@ __export(migrate_exports, {
   prepareSQLitePush: () => prepareSQLitePush,
   prepareSnapshotFolderName: () => prepareSnapshotFolderName,
   promptColumnsConflicts: () => promptColumnsConflicts,
+  promptNamedConflict: () => promptNamedConflict,
   promptNamedWithSchemasConflict: () => promptNamedWithSchemasConflict,
   promptSchemasConflict: () => promptSchemasConflict,
+  roleResolver: () => roleResolver,
   schemasResolver: () => schemasResolver,
   sequencesResolver: () => sequencesResolver,
   tablesResolver: () => tablesResolver,
   writeResult: () => writeResult
 });
-var import_fs5, import_hanji3, import_path4, schemasResolver, tablesResolver, sequencesResolver, enumsResolver, columnsResolver, prepareAndMigratePg, preparePgPush, prepareMySQLPush, prepareAndMigrateMysql, prepareAndMigrateSqlite, prepareAndMigrateLibSQL, prepareSQLitePush, prepareLibSQLPush, promptColumnsConflicts, promptNamedWithSchemasConflict, promptSchemasConflict, BREAKPOINT, writeResult, embeddedMigrations, prepareSnapshotFolderName, two;
+var import_fs5, import_hanji3, import_path4, schemasResolver, tablesResolver, sequencesResolver, roleResolver, policyResolver, enumsResolver, columnsResolver, prepareAndMigratePg, preparePgPush, prepareMySQLPush, prepareAndMigrateMysql, prepareAndMigrateSqlite, prepareAndMigrateLibSQL, prepareSQLitePush, prepareLibSQLPush, promptColumnsConflicts, promptNamedConflict, promptNamedWithSchemasConflict, promptSchemasConflict, BREAKPOINT, writeResult, embeddedMigrations, prepareSnapshotFolderName, two;
 var init_migrate = __esm({
   "src/cli/commands/migrate.ts"() {
     "use strict";
@@ -29602,6 +30328,32 @@ var init_migrate = __esm({
         throw e2;
       }
     };
+    roleResolver = async (input) => {
+      const result = await promptNamedConflict(
+        input.created,
+        input.deleted,
+        "role"
+      );
+      return {
+        created: result.created,
+        deleted: result.deleted,
+        renamed: result.renamed
+      };
+    };
+    policyResolver = async (input) => {
+      const result = await promptColumnsConflicts(
+        input.tableName,
+        input.created,
+        input.deleted
+      );
+      return {
+        tableName: input.tableName,
+        schema: input.schema,
+        created: result.created,
+        deleted: result.deleted,
+        renamed: result.renamed
+      };
+    };
     enumsResolver = async (input) => {
       try {
         const { created, deleted, moved, renamed } = await promptNamedWithSchemasConflict(
@@ -29670,6 +30422,8 @@ var init_migrate = __esm({
           schemasResolver,
           enumsResolver,
           sequencesResolver,
+          policyResolver,
+          roleResolver,
           tablesResolver,
           columnsResolver,
           validatedPrev,
@@ -29704,6 +30458,8 @@ var init_migrate = __esm({
         schemasResolver,
         enumsResolver,
         sequencesResolver,
+        policyResolver,
+        roleResolver,
         tablesResolver,
         columnsResolver,
         validatedPrev,
@@ -29984,6 +30740,56 @@ var init_migrate = __esm({
       result.deleted.push(...leftMissing);
       return result;
     };
+    promptNamedConflict = async (newItems, missingItems, entity) => {
+      if (missingItems.length === 0 || newItems.length === 0) {
+        return {
+          created: newItems,
+          renamed: [],
+          deleted: missingItems
+        };
+      }
+      const result = { created: [], renamed: [], deleted: [] };
+      let index4 = 0;
+      let leftMissing = [...missingItems];
+      do {
+        const created = newItems[index4];
+        const renames = leftMissing.map((it) => {
+          return { from: it, to: created };
+        });
+        const promptData = [created, ...renames];
+        const { status, data } = await (0, import_hanji3.render)(
+          new ResolveSelectNamed(created, promptData, entity)
+        );
+        if (status === "aborted") {
+          console.error("ERROR");
+          process.exit(1);
+        }
+        if (isRenamePromptItem(data)) {
+          console.log(
+            `${source_default.yellow("~")} ${data.from.name} \u203A ${data.to.name} ${source_default.gray(
+              `${entity} will be renamed/moved`
+            )}`
+          );
+          if (data.from.name !== data.to.name) {
+            result.renamed.push(data);
+          }
+          delete leftMissing[leftMissing.indexOf(data.from)];
+          leftMissing = leftMissing.filter(Boolean);
+        } else {
+          console.log(
+            `${source_default.green("+")} ${data.name} ${source_default.gray(
+              `${entity} will be created`
+            )}`
+          );
+          result.created.push(created);
+        }
+        index4 += 1;
+      } while (index4 < newItems.length);
+      console.log(source_default.gray(`--- all ${entity} conflicts resolved ---
+`));
+      result.deleted.push(...leftMissing);
+      return result;
+    };
     promptNamedWithSchemasConflict = async (newItems, missingItems, entity) => {
       if (missingItems.length === 0 || newItems.length === 0) {
         return {
@@ -38812,9 +39618,9 @@ var init_body2 = __esm({
 // ../node_modules/.pnpm/node-fetch@3.3.2/node_modules/node-fetch/src/headers.js
 function fromRawHeaders(headers = []) {
   return new Headers2(
-    headers.reduce((result, value, index4, array) => {
+    headers.reduce((result, value, index4, array2) => {
       if (index4 % 2 === 0) {
-        result.push(array.slice(index4, index4 + 2));
+        result.push(array2.slice(index4, index4 + 2));
       }
       return result;
     }, []).filter(([name, value]) => {
@@ -39212,7 +40018,7 @@ function determineRequestsReferrer(request, { referrerURLCallback, referrerOrigi
   if (request.referrer === "no-referrer" || request.referrerPolicy === "") {
     return null;
   }
-  const policy = request.referrerPolicy;
+  const policy2 = request.referrerPolicy;
   if (request.referrer === "about:client") {
     return "no-referrer";
   }
@@ -39229,7 +40035,7 @@ function determineRequestsReferrer(request, { referrerURLCallback, referrerOrigi
     referrerOrigin = referrerOriginCallback(referrerOrigin);
   }
   const currentURL = new URL(request.url);
-  switch (policy) {
+  switch (policy2) {
     case "no-referrer":
       return "no-referrer";
     case "origin":
@@ -39265,18 +40071,18 @@ function determineRequestsReferrer(request, { referrerURLCallback, referrerOrigi
       }
       return referrerURL;
     default:
-      throw new TypeError(`Invalid referrerPolicy: ${policy}`);
+      throw new TypeError(`Invalid referrerPolicy: ${policy2}`);
   }
 }
 function parseReferrerPolicyFromHeader(headers) {
   const policyTokens = (headers.get("referrer-policy") || "").split(/[,\s]+/);
-  let policy = "";
+  let policy2 = "";
   for (const token of policyTokens) {
     if (token && ReferrerPolicy.has(token)) {
-      policy = token;
+      policy2 = token;
     }
   }
-  return policy;
+  return policy2;
 }
 var import_node_net, ReferrerPolicy, DEFAULT_REFERRER_POLICY;
 var init_referrer = __esm({
@@ -59923,7 +60729,7 @@ var require_fromWebToken = __commonJS({
     var fromWebToken2 = (init2) => async () => {
       var _a;
       (_a = init2.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-web-identity", "fromWebToken");
-      const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init2;
+      const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy: policy2, durationSeconds } = init2;
       let { roleAssumerWithWebIdentity } = init2;
       if (!roleAssumerWithWebIdentity) {
         const { getDefaultRoleAssumerWithWebIdentity } = await Promise.resolve().then(() => __importStar2(require_dist_cjs50()));
@@ -59939,7 +60745,7 @@ var require_fromWebToken = __commonJS({
         WebIdentityToken: webIdentityToken,
         ProviderId: providerId,
         PolicyArns: policyArns,
-        Policy: policy,
+        Policy: policy2,
         DurationSeconds: durationSeconds
       });
     };
@@ -62210,7 +63016,7 @@ var init_connections = __esm({
         return { ...db, ...proxy, migrate: migrateFn };
       }
       console.log(
-        "Please install 'better-sqlite3' for Drizzle Kit to connect to SQLite databases"
+        "Please install either 'better-sqlite3' or '@libsql/client' for Drizzle Kit to connect to SQLite databases"
       );
       process.exit(1);
     };
@@ -63403,13 +64209,13 @@ var require_event_stream = __commonJS({
     es.writeArray = function(done) {
       if ("function" !== typeof done)
         throw new Error("function writeArray (done): done must be function");
-      var a = new Stream3(), array = [], isDone = false;
+      var a = new Stream3(), array2 = [], isDone = false;
       a.write = function(l) {
-        array.push(l);
+        array2.push(l);
       };
       a.end = function() {
         isDone = true;
-        done(null, array);
+        done(null, array2);
       };
       a.writable = true;
       a.readable = false;
@@ -63417,23 +64223,23 @@ var require_event_stream = __commonJS({
         a.writable = a.readable = false;
         if (isDone)
           return;
-        done(new Error("destroyed before end"), array);
+        done(new Error("destroyed before end"), array2);
       };
       return a;
     };
-    es.readArray = function(array) {
+    es.readArray = function(array2) {
       var stream = new Stream3(), i2 = 0, paused = false, ended = false;
       stream.readable = true;
       stream.writable = false;
-      if (!Array.isArray(array))
+      if (!Array.isArray(array2))
         throw new Error("event-stream.read expects an array");
       stream.resume = function() {
         if (ended)
           return;
         paused = false;
-        var l = array.length;
+        var l = array2.length;
         while (i2 < l && !paused && !ended) {
-          stream.emit("data", array[i2++]);
+          stream.emit("data", array2[i2++]);
         }
         if (i2 == l && !ended)
           ended = true, stream.readable = false, stream.emit("end");
@@ -67058,8 +67864,8 @@ var require_utils4 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.string = exports2.stream = exports2.pattern = exports2.path = exports2.fs = exports2.errno = exports2.array = void 0;
-    var array = require_array();
-    exports2.array = array;
+    var array2 = require_array();
+    exports2.array = array2;
     var errno = require_errno();
     exports2.errno = errno;
     var fs9 = require_fs2();
@@ -78917,7 +79723,7 @@ var init_pgIntrospect = __esm({
     init_global();
     init_pgSerializer();
     init_views();
-    pgPushIntrospect = async (db, filters, schemaFilters) => {
+    pgPushIntrospect = async (db, filters, schemaFilters, entities = { roles: true }) => {
       const matchers = filters.map((it) => {
         return new Minimatch(it);
       });
@@ -78946,7 +79752,7 @@ var init_pgIntrospect = __esm({
       );
       const res = await (0, import_hanji9.renderWithTask)(
         progress,
-        fromDatabase2(db, filter2, schemaFilters)
+        fromDatabase2(db, filter2, schemaFilters, entities)
       );
       const schema5 = { id: originUUID, prevId: "", ...res };
       const { internal, ...schemaWithoutInternals } = schema5;
@@ -79411,6 +80217,7 @@ var init_push = __esm({
             }
           });
           if (verbose) {
+            console.log();
             console.log(
               withStyle.warning("You are about to execute current statements:")
             );
@@ -79468,11 +80275,11 @@ var init_push = __esm({
         console.log(e2);
       }
     };
-    pgPush = async (schemaPath, verbose, strict, credentials2, tablesFilter, schemasFilter, force) => {
+    pgPush = async (schemaPath, verbose, strict, credentials2, tablesFilter, schemasFilter, entities, force) => {
       const { preparePostgresDB: preparePostgresDB2 } = await Promise.resolve().then(() => (init_connections(), connections_exports));
       const { pgPushIntrospect: pgPushIntrospect2 } = await Promise.resolve().then(() => (init_pgIntrospect(), pgIntrospect_exports));
       const db = await preparePostgresDB2(credentials2);
-      const { schema: schema5 } = await pgPushIntrospect2(db, tablesFilter, schemasFilter);
+      const { schema: schema5 } = await pgPushIntrospect2(db, tablesFilter, schemasFilter, entities);
       const { preparePgPush: preparePgPush2 } = await Promise.resolve().then(() => (init_migrate(), migrate_exports));
       const statements = await preparePgPush2(schemaPath, schema5, schemasFilter);
       try {
@@ -80642,7 +81449,7 @@ function generateIdentityParams(identity) {
   }
   return `.generatedByDefaultAsIdentity(${paramsObj})`;
 }
-var import_drizzle_orm9, import_relations, pgImportsList, timeConfig2, possibleIntervals, intervalStrToObj, intervalConfig, mapColumnDefault3, importsPatch2, relations3, escapeColumnKey3, withCasing2, paramNameFor, schemaToTypeScript3, isCyclic3, isSelf3, buildArrayDefault, mapDefault, column6, dimensionsInArray, createTableColumns3, createTableIndexes3, createTablePKs3, createTableUniques3, createTableFKs3;
+var import_drizzle_orm9, import_relations, pgImportsList, timeConfig2, possibleIntervals, intervalStrToObj, intervalConfig, mapColumnDefault3, importsPatch2, relations3, escapeColumnKey3, withCasing2, paramNameFor, schemaToTypeScript3, isCyclic3, isSelf3, buildArrayDefault, mapDefault, column6, dimensionsInArray, createTableColumns3, createTableIndexes3, createTablePKs3, createTablePolicies, createTableUniques3, createTableFKs3;
 var init_introspect_pg = __esm({
   "src/introspect-pg.ts"() {
     "use strict";
@@ -80810,6 +81617,9 @@ var init_introspect_pg = __esm({
           const uniqueImports = Object.values(it.uniqueConstraints).map(
             (it2) => "unique"
           );
+          const policiesImports = Object.values(it.policies).map(
+            (it2) => "pgPolicy"
+          );
           if (it.schema && it.schema !== "public" && it.schema !== "") {
             res.pg.push("pgSchema");
           }
@@ -80817,6 +81627,7 @@ var init_introspect_pg = __esm({
           res.pg.push(...fkImpots);
           res.pg.push(...pkImports);
           res.pg.push(...uniqueImports);
+          res.pg.push(...policiesImports);
           const columnImports = Object.values(it.columns).map((col) => {
             let patched = (importsPatch2[col.type] || col.type).replace("[]", "");
             patched = patched === "double precision" ? "doublePrecision" : patched;
@@ -80850,6 +81661,9 @@ var init_introspect_pg = __esm({
           imports.pg.push("pgEnum");
         }
       });
+      if (Object.keys(schema5.roles).length > 0) {
+        imports.pg.push("pgRole");
+      }
       const enumStatements = Object.values(schema5.enums).map((it) => {
         const enumSchema3 = schemas[it.schema];
         const paramName = paramNameFor(it.name, enumSchema3);
@@ -80885,9 +81699,16 @@ var init_introspect_pg = __esm({
         }
         return `export const ${withCasing2(paramName, casing2)} = ${func}("${it.name}"${params ? `, { ${params.trimChar(",")} }` : ""})
 `;
-      }).join("").concat("\n");
+      }).join("").concat("");
       const schemaStatements = Object.entries(schemas).map((it) => {
         return `export const ${it[1]} = pgSchema("${it[0]}");
+`;
+      }).join("");
+      const rolesNameToTsKey = {};
+      const rolesStatements = Object.entries(schema5.roles).map((it) => {
+        const fields = it[1];
+        rolesNameToTsKey[fields.name] = it[0];
+        return `export const ${withCasing2(it[0], casing2)} = pgRole("${fields.name}", ${!fields.createDb && !fields.createRole && fields.inherit ? "" : `${`, { ${fields.createDb ? `createDb: true,` : ""}${fields.createRole ? ` createRole: true,` : ""}${!fields.inherit ? ` inherit: false ` : ""}`.trimChar(",")}}`} );
 `;
       }).join("");
       const tableStatements = Object.values(schema5.tables).map((table4) => {
@@ -80906,8 +81727,8 @@ var init_introspect_pg = __esm({
           schema5.internal
         );
         statement += "}";
-        if (Object.keys(table4.indexes).length > 0 || Object.values(table4.foreignKeys).length > 0 || Object.keys(table4.compositePrimaryKeys).length > 0 || Object.keys(table4.uniqueConstraints).length > 0) {
-          statement += ",\n";
+        if (Object.keys(table4.indexes).length > 0 || Object.values(table4.foreignKeys).length > 0 || Object.values(table4.policies).length > 0 || Object.keys(table4.compositePrimaryKeys).length > 0 || Object.keys(table4.uniqueConstraints).length > 0) {
+          statement += ", ";
           statement += "(table) => {\n";
           statement += "	return {\n";
           statement += createTableIndexes3(
@@ -80924,6 +81745,11 @@ var init_introspect_pg = __esm({
             Object.values(table4.uniqueConstraints),
             casing2
           );
+          statement += createTablePolicies(
+            Object.values(table4.policies),
+            casing2,
+            rolesNameToTsKey
+          );
           statement += "	}\n";
           statement += "}";
         }
@@ -80934,14 +81760,14 @@ var init_introspect_pg = __esm({
       const importsTs = `import { ${uniquePgImports.join(
         ", "
       )} } from "drizzle-orm/pg-core"
-  import { sql } from "drizzle-orm"
+import { sql } from "drizzle-orm"
 
 `;
       let decalrations = schemaStatements;
+      decalrations += rolesStatements;
       decalrations += enumStatements;
       decalrations += sequencesStatements;
-      decalrations += "\n";
-      decalrations += tableStatements.join("\n\n");
+      decalrations += tableStatements.join("\n");
       const file = importsTs + decalrations;
       const schemaEntry = `
     {
@@ -81372,6 +82198,23 @@ var init_introspect_pg = __esm({
         }).join(", ")}]${it.name ? `, name: "${it.name}"` : ""}}`;
         statement += ")";
         statement += `,
+`;
+      });
+      return statement;
+    };
+    createTablePolicies = (policies, casing2, rolesNameToTsKey = {}) => {
+      let statement = "";
+      policies.forEach((it) => {
+        var _a, _b, _c;
+        const idxKey = withCasing2(it.name, casing2);
+        const mappedItTo = (_a = it.to) == null ? void 0 : _a.map((v) => {
+          return rolesNameToTsKey[v] ? withCasing2(rolesNameToTsKey[v], casing2) : `"${v}"`;
+        });
+        statement += `		${idxKey}: `;
+        statement += "pgPolicy(";
+        statement += `"${it.name}", { `;
+        statement += `as: "${(_b = it.as) == null ? void 0 : _b.toLowerCase()}", for: "${(_c = it.for) == null ? void 0 : _c.toLowerCase()}", to: [${mappedItTo == null ? void 0 : mappedItTo.join(", ")}]${it.using ? `, using: sql\`${it.using}\`` : ""}${it.withCheck ? `, withCheck: sql\`${it.withCheck}\` ` : ""}`;
+        statement += ` }),
 `;
       });
       return statement;
@@ -81449,7 +82292,7 @@ var init_introspect = __esm({
     init_utils();
     init_views();
     init_migrate();
-    introspectPostgres = async (casing2, out, breakpoints, credentials2, tablesFilter, schemasFilter, prefix2) => {
+    introspectPostgres = async (casing2, out, breakpoints, credentials2, tablesFilter, schemasFilter, prefix2, entities) => {
       const { preparePostgresDB: preparePostgresDB2 } = await Promise.resolve().then(() => (init_connections(), connections_exports));
       const db = await preparePostgresDB2(credentials2);
       const matchers = tablesFilter.map((it) => {
@@ -81477,9 +82320,15 @@ var init_introspect = __esm({
       const progress = new IntrospectProgress(true);
       const res = await (0, import_hanji12.renderWithTask)(
         progress,
-        fromDatabase2(db, filter2, schemasFilter, (stage, count, status) => {
-          progress.update(stage, count, status);
-        })
+        fromDatabase2(
+          db,
+          filter2,
+          schemasFilter,
+          entities,
+          (stage, count, status) => {
+            progress.update(stage, count, status);
+          }
+        )
       );
       const schema5 = { id: originUUID, prevId: "", ...res };
       const ts = schemaToTypeScript3(schema5, casing2);
@@ -81498,6 +82347,7 @@ var init_introspect = __esm({
           schemasResolver,
           enumsResolver,
           sequencesResolver,
+          policyResolver,
           tablesResolver,
           columnsResolver,
           dryPg,
@@ -85011,7 +85861,8 @@ var pull = command({
       breakpoints,
       tablesFilter,
       schemasFilter,
-      prefix: prefix2
+      prefix: prefix2,
+      entities
     } = config;
     (0, import_fs13.mkdirSync)(out, { recursive: true });
     console.log(
@@ -85050,7 +85901,8 @@ var pull = command({
           credentials2,
           tablesFilter,
           schemasFilter,
-          prefix2
+          prefix2,
+          entities
         );
       } else if (dialect7 === "mysql") {
         const { introspectMysql: introspectMysql2 } = await Promise.resolve().then(() => (init_introspect(), introspect_exports));
@@ -85221,7 +86073,7 @@ init_utils2();
 var version2 = async () => {
   const { npmVersion } = await ormCoreVersions();
   const ormVersion = npmVersion ? `drizzle-orm: v${npmVersion}` : "";
-  const envVersion = "0.24.2-218cddb";
+  const envVersion = "0.24.2-2475c4f";
   const kitVersion = envVersion ? `v${envVersion}` : "--";
   const versions = `drizzle-kit: ${kitVersion}
 ${ormVersion}`;