drizzle-kit 0.26.2-a43c673 → 0.26.2-b2b714a

package/bin.cjs

@@ -1075,7 +1075,7 @@ var require_hanji = __commonJS({
 });
 
 // src/cli/views.ts
-var import_hanji, warning, err, info, grey, error, schema, isRenamePromptItem, ResolveColumnSelect, tableKey, ResolveSelect, ResolveSchemasSelect, Spinner, IntrospectProgress, MigrateProgress, ProgressView, DropMigrationView, trimmedRange;
+var import_hanji, warning, err, info, grey, error, schema, isRenamePromptItem, ResolveColumnSelect, tableKey, ResolveSelectNamed, ResolveSelect, ResolveSchemasSelect, Spinner, IntrospectProgress, MigrateProgress, ProgressView, DropMigrationView, trimmedRange;
 var init_views = __esm({
   "src/cli/views.ts"() {
     "use strict";
@@ -1178,6 +1178,53 @@ Is ${source_default.bold.blue(
     tableKey = (it) => {
       return it.schema === "public" || !it.schema ? it.name : `${it.schema}.${it.name}`;
     };
+    ResolveSelectNamed = class extends import_hanji.Prompt {
+      constructor(base, data, entityType) {
+        super();
+        this.base = base;
+        this.entityType = entityType;
+        this.on("attach", (terminal) => terminal.toggleCursor("hide"));
+        this.state = new import_hanji.SelectState(data);
+        this.state.bind(this);
+        this.base = base;
+      }
+      render(status) {
+        if (status === "submitted" || status === "aborted") {
+          return "";
+        }
+        const key = this.base.name;
+        let text = `
+Is ${source_default.bold.blue(key)} ${this.entityType} created or renamed from another ${this.entityType}?
+`;
+        const isSelectedRenamed = isRenamePromptItem(
+          this.state.items[this.state.selectedIdx]
+        );
+        const selectedPrefix = isSelectedRenamed ? source_default.yellow("\u276F ") : source_default.green("\u276F ");
+        const labelLength = this.state.items.filter((it) => isRenamePromptItem(it)).map((_2) => {
+          const it = _2;
+          const keyFrom = it.from.name;
+          return key.length + 3 + keyFrom.length;
+        }).reduce((a, b) => {
+          if (a > b) {
+            return a;
+          }
+          return b;
+        }, 0);
+        const entityType = this.entityType;
+        this.state.items.forEach((it, idx) => {
+          const isSelected = idx === this.state.selectedIdx;
+          const isRenamed = isRenamePromptItem(it);
+          const title = isRenamed ? `${it.from.name} \u203A ${it.to.name}`.padEnd(labelLength, " ") : it.name.padEnd(labelLength, " ");
+          const label = isRenamed ? `${source_default.yellow("~")} ${title} ${source_default.gray(`rename ${entityType}`)}` : `${source_default.green("+")} ${title} ${source_default.gray(`create ${entityType}`)}`;
+          text += isSelected ? `${selectedPrefix}${label}` : `  ${label}`;
+          text += idx != this.state.items.length - 1 ? "\n" : "";
+        });
+        return text;
+      }
+      result() {
+        return this.state.items[this.state.selectedIdx];
+      }
+    };
     ResolveSelect = class extends import_hanji.Prompt {
       constructor(base, data, entityType) {
         super();
@@ -1316,6 +1363,11 @@ Is ${source_default.bold.blue(
             name: "foreign keys",
             status: "fetching"
           },
+          policies: {
+            count: 0,
+            name: "policies",
+            status: "fetching"
+          },
           checks: {
             count: 0,
             name: "check constraints",
@@ -1362,6 +1414,7 @@ Is ${source_default.bold.blue(
         info2 += this.hasEnums ? this.statusText(spin, this.state.enums) : "";
         info2 += this.statusText(spin, this.state.indexes);
         info2 += this.statusText(spin, this.state.fks);
+        info2 += this.statusText(spin, this.state.policies);
         info2 += this.statusText(spin, this.state.checks);
         info2 += this.statusText(spin, this.state.views);
         return info2;
@@ -1748,8 +1801,8 @@ var init_lib = __esm({
         return void 0;
       };
       util2.isInteger = typeof Number.isInteger === "function" ? (val2) => Number.isInteger(val2) : (val2) => typeof val2 === "number" && isFinite(val2) && Math.floor(val2) === val2;
-      function joinValues(array, separator = " | ") {
-        return array.map((val2) => typeof val2 === "string" ? `'${val2}'` : val2).join(separator);
+      function joinValues(array2, separator = " | ") {
+        return array2.map((val2) => typeof val2 === "string" ? `'${val2}'` : val2).join(separator);
       }
       util2.joinValues = joinValues;
       util2.jsonStringifyReplacer = (_2, value) => {
@@ -5779,7 +5832,7 @@ var init_vector = __esm({
 });
 
 // src/serializer/pgSchema.ts
-var indexV2, columnV2, tableV2, enumSchemaV1, enumSchema, pgSchemaV2, references, columnV1, tableV1, pgSchemaV1, indexColumn, index2, indexV4, indexV5, indexV6, fk2, sequenceSchema, sequenceSquashed, columnV7, column2, checkConstraint2, columnSquashed, tableV32, compositePK2, uniqueConstraint2, viewWithOption, matViewWithOption, mergedViewWithOption, view2, tableV42, tableV5, tableV6, tableV7, table2, schemaHash2, kitInternals2, pgSchemaInternalV3, pgSchemaInternalV4, pgSchemaInternalV5, pgSchemaInternalV6, pgSchemaExternal, pgSchemaInternalV7, pgSchemaInternal, tableSquashed2, tableSquashedV42, pgSchemaSquashedV4, pgSchemaSquashedV6, pgSchemaSquashed, pgSchemaV3, pgSchemaV4, pgSchemaV5, pgSchemaV6, pgSchemaV7, pgSchema, backwardCompatiblePgSchema, PgSquasher, squashPgScheme, dryPg;
+var indexV2, columnV2, tableV2, enumSchemaV1, enumSchema, pgSchemaV2, references, columnV1, tableV1, pgSchemaV1, indexColumn, index2, indexV4, indexV5, indexV6, fk2, sequenceSchema, roleSchema, sequenceSquashed, columnV7, column2, checkConstraint2, columnSquashed, tableV32, compositePK2, uniqueConstraint2, policy, viewWithOption, matViewWithOption, mergedViewWithOption, view2, tableV42, tableV5, tableV6, tableV7, table2, schemaHash2, kitInternals2, pgSchemaInternalV3, pgSchemaInternalV4, pgSchemaInternalV5, pgSchemaInternalV6, pgSchemaExternal, pgSchemaInternalV7, pgSchemaInternal, tableSquashed2, tableSquashedV42, pgSchemaSquashedV4, pgSchemaSquashedV6, pgSchemaSquashed, pgSchemaV3, pgSchemaV4, pgSchemaV5, pgSchemaV6, pgSchemaV7, pgSchema, backwardCompatiblePgSchema, PgSquasher, squashPgScheme, dryPg;
 var init_pgSchema = __esm({
   "src/serializer/pgSchema.ts"() {
     "use strict";
@@ -5911,6 +5964,12 @@ var init_pgSchema = __esm({
       cycle: booleanType().optional(),
       schema: stringType()
     }).strict();
+    roleSchema = objectType({
+      name: stringType(),
+      createDb: booleanType().optional(),
+      createRole: booleanType().optional(),
+      inherit: booleanType().optional()
+    }).strict();
     sequenceSquashed = objectType({
       name: stringType(),
       schema: stringType(),
@@ -5978,6 +6037,14 @@ var init_pgSchema = __esm({
       columns: stringType().array(),
       nullsNotDistinct: booleanType()
     }).strict();
+    policy = objectType({
+      name: stringType(),
+      as: enumType(["PERMISSIVE", "RESTRICTIVE"]).optional(),
+      for: enumType(["ALL", "SELECT", "INSERT", "UPDATE", "DELETE"]).optional(),
+      to: stringType().array().optional(),
+      using: stringType().optional(),
+      withCheck: stringType().optional()
+    }).strict();
     viewWithOption = objectType({
       checkOption: enumType(["local", "cascaded"]).optional(),
       securityBarrier: booleanType().optional(),
@@ -6058,7 +6125,9 @@ var init_pgSchema = __esm({
       foreignKeys: recordType(stringType(), fk2),
       compositePrimaryKeys: recordType(stringType(), compositePK2),
       uniqueConstraints: recordType(stringType(), uniqueConstraint2).default({}),
-      checkConstraints: recordType(stringType(), checkConstraint2).default({})
+      policies: recordType(stringType(), policy).default({}),
+      checkConstraints: recordType(stringType(), checkConstraint2).default({}),
+      isRLSEnabled: booleanType().default(false)
     }).strict();
     schemaHash2 = objectType({
       id: stringType(),
@@ -6153,6 +6222,7 @@ var init_pgSchema = __esm({
       schemas: recordType(stringType(), stringType()),
       views: recordType(stringType(), view2).default({}),
       sequences: recordType(stringType(), sequenceSchema).default({}),
+      roles: recordType(stringType(), roleSchema).default({}),
       _meta: objectType({
         schemas: recordType(stringType(), stringType()),
         tables: recordType(stringType(), stringType()),
@@ -6168,7 +6238,9 @@ var init_pgSchema = __esm({
       foreignKeys: recordType(stringType(), stringType()),
       compositePrimaryKeys: recordType(stringType(), stringType()),
       uniqueConstraints: recordType(stringType(), stringType()),
-      checkConstraints: recordType(stringType(), stringType())
+      policies: recordType(stringType(), stringType()),
+      checkConstraints: recordType(stringType(), stringType()),
+      isRLSEnabled: booleanType().default(false)
     }).strict();
     tableSquashedV42 = objectType({
       name: stringType(),
@@ -6198,7 +6270,8 @@ var init_pgSchema = __esm({
       enums: recordType(stringType(), enumSchema),
       schemas: recordType(stringType(), stringType()),
       views: recordType(stringType(), view2),
-      sequences: recordType(stringType(), sequenceSquashed)
+      sequences: recordType(stringType(), sequenceSquashed),
+      roles: recordType(stringType(), roleSchema).default({})
     }).strict();
     pgSchemaV3 = pgSchemaInternalV3.merge(schemaHash2);
     pgSchemaV4 = pgSchemaInternalV4.merge(schemaHash2);
@@ -6281,6 +6354,25 @@ var init_pgSchema = __esm({
       squashFK: (fk4) => {
         return `${fk4.name};${fk4.tableFrom};${fk4.columnsFrom.join(",")};${fk4.tableTo};${fk4.columnsTo.join(",")};${fk4.onUpdate ?? ""};${fk4.onDelete ?? ""};${fk4.schemaTo || "public"}`;
       },
+      squashPolicy: (policy2) => {
+        var _a;
+        return `${policy2.name}--${policy2.as}--${policy2.for}--${(_a = policy2.to) == null ? void 0 : _a.join(",")}--${policy2.using}--${policy2.withCheck}`;
+      },
+      unsquashPolicy: (policy2) => {
+        const splitted = policy2.split("--");
+        return {
+          name: splitted[0],
+          as: splitted[1],
+          for: splitted[2],
+          to: splitted[3].split(","),
+          using: splitted[4] !== "undefined" ? splitted[4] : void 0,
+          withCheck: splitted[5] !== "undefined" ? splitted[5] : void 0
+        };
+      },
+      squashPolicyPush: (policy2) => {
+        var _a;
+        return `${policy2.name}--${policy2.as}--${policy2.for}--${(_a = policy2.to) == null ? void 0 : _a.join(",")}`;
+      },
       squashPK: (pk) => {
         return `${pk.columns.join(",")};${pk.name}`;
       },
@@ -6393,6 +6485,9 @@ var init_pgSchema = __esm({
               return PgSquasher.squashUnique(unq);
             }
           );
+          const squashedPolicies = mapValues(it[1].policies, (policy2) => {
+            return action === "push" ? PgSquasher.squashPolicyPush(policy2) : PgSquasher.squashPolicy(policy2);
+          });
           const squashedChecksContraints = mapValues(
             it[1].checkConstraints,
             (check2) => {
@@ -6409,7 +6504,9 @@ var init_pgSchema = __esm({
               foreignKeys: squashedFKs,
               compositePrimaryKeys: squashedPKs,
               uniqueConstraints: squashedUniqueConstraints,
-              checkConstraints: squashedChecksContraints
+              policies: squashedPolicies,
+              checkConstraints: squashedChecksContraints,
+              isRLSEnabled: it[1].isRLSEnabled ?? false
             }
           ];
         })
@@ -6433,7 +6530,8 @@ var init_pgSchema = __esm({
         enums: json.enums,
         schemas: json.schemas,
         views: json.views,
-        sequences: mappedSequences
+        sequences: mappedSequences,
+        roles: json.roles
       };
     };
     dryPg = pgSchema.parse({
@@ -10770,10 +10868,10 @@ var require_inflight = __commonJS({
     }
     function slice(args) {
       var length = args.length;
-      var array = [];
+      var array2 = [];
       for (var i2 = 0; i2 < length; i2++)
-        array[i2] = args[i2];
-      return array;
+        array2[i2] = args[i2];
+      return array2;
     }
   }
 });
@@ -11596,6 +11694,13 @@ var init_cli = __esm({
       breakpoints: booleanType().optional().default(true),
       migrations: objectType({
         prefix: prefix.optional().default("index")
+      }).optional(),
+      entities: objectType({
+        roles: booleanType().or(objectType({
+          provider: stringType().optional(),
+          include: stringType().array().optional(),
+          exclude: stringType().array().optional()
+        })).optional().default(false)
       }).optional()
     }).passthrough();
     configCheck = objectType({
@@ -17783,7 +17888,8 @@ var init_utils4 = __esm({
           credentials: parsed2.data,
           tablesFilter,
           schemasFilter,
-          prefix: ((_a = config.migrations) == null ? void 0 : _a.prefix) || "index"
+          prefix: ((_a = config.migrations) == null ? void 0 : _a.prefix) || "index",
+          entities: config.entities
         };
       }
       if (dialect4 === "mysql") {
@@ -17800,7 +17906,8 @@ var init_utils4 = __esm({
           credentials: parsed2.data,
           tablesFilter,
           schemasFilter,
-          prefix: ((_b = config.migrations) == null ? void 0 : _b.prefix) || "index"
+          prefix: ((_b = config.migrations) == null ? void 0 : _b.prefix) || "index",
+          entities: config.entities
         };
       }
       if (dialect4 === "sqlite") {
@@ -17817,7 +17924,8 @@ var init_utils4 = __esm({
           credentials: parsed2.data,
           tablesFilter,
           schemasFilter,
-          prefix: ((_c = config.migrations) == null ? void 0 : _c.prefix) || "index"
+          prefix: ((_c = config.migrations) == null ? void 0 : _c.prefix) || "index",
+          entities: config.entities
         };
       }
       if (dialect4 === "turso") {
@@ -18861,6 +18969,8 @@ var init_pgImports = __esm({
       const enums = [];
       const schemas = [];
       const sequences = [];
+      const roles = [];
+      const policies = [];
       const views = [];
       const matViews = [];
       const i0values = Object.values(exports2);
@@ -18884,8 +18994,14 @@ var init_pgImports = __esm({
         if ((0, import_pg_core.isPgSequence)(t2)) {
           sequences.push(t2);
         }
+        if ((0, import_drizzle_orm4.is)(t2, import_pg_core.PgRole)) {
+          roles.push(t2);
+        }
+        if ((0, import_drizzle_orm4.is)(t2, import_pg_core.PgPolicy)) {
+          policies.push(t2);
+        }
       });
-      return { tables, enums, schemas, sequences, views, matViews };
+      return { tables, enums, schemas, sequences, views, matViews, roles, policies };
     };
     prepareFromPgImports = async (imports) => {
       const tables = [];
@@ -18893,6 +19009,8 @@ var init_pgImports = __esm({
       const schemas = [];
       const sequences = [];
       const views = [];
+      const roles = [];
+      const policies = [];
       const matViews = [];
       const { unregister } = await safeRegister();
       for (let i2 = 0; i2 < imports.length; i2++) {
@@ -18905,9 +19023,11 @@ var init_pgImports = __esm({
         sequences.push(...prepared.sequences);
         views.push(...prepared.views);
         matViews.push(...prepared.matViews);
+        roles.push(...prepared.roles);
+        policies.push(...prepared.policies);
       }
       unregister();
-      return { tables: Array.from(new Set(tables)), enums, schemas, sequences, views, matViews };
+      return { tables: Array.from(new Set(tables)), enums, schemas, sequences, views, matViews, roles, policies };
     };
   }
 });
@@ -18915,6 +19035,7 @@ var init_pgImports = __esm({
 // src/serializer/pgSerializer.ts
 var pgSerializer_exports = {};
 __export(pgSerializer_exports, {
+  buildArrayString: () => buildArrayString,
   fromDatabase: () => fromDatabase2,
   generatePgSnapshot: () => generatePgSnapshot,
   indexName: () => indexName2
@@ -18926,14 +19047,14 @@ function maxRangeForIdentityBasedOn(columnType) {
   return columnType === "integer" ? "2147483647" : columnType === "bigint" ? "9223372036854775807" : "32767";
 }
 function minRangeForIdentityBasedOn(columnType) {
-  return columnType === "integer" ? "-2147483648" : columnType === "bitint" ? "-9223372036854775808" : "-32768";
+  return columnType === "integer" ? "-2147483648" : columnType === "bigint" ? "-9223372036854775808" : "-32768";
 }
 function stringFromDatabaseIdentityProperty(field) {
   return typeof field === "string" ? field : typeof field === "undefined" ? void 0 : typeof field === "bigint" ? field.toString() : String(field);
 }
-function buildArrayString(array, sqlType) {
+function buildArrayString(array2, sqlType) {
   sqlType = sqlType.split("[")[0];
-  const values = array.map((value) => {
+  const values = array2.map((value) => {
     if (typeof value === "number" || typeof value === "bigint") {
       return value.toString();
     } else if (typeof value === "boolean") {
@@ -18955,6 +19076,40 @@ function buildArrayString(array, sqlType) {
   }).join(",");
   return `{${values}}`;
 }
+function prepareRoles(entities) {
+  let useRoles = false;
+  const includeRoles = [];
+  const excludeRoles = [];
+  if (entities && entities.roles) {
+    if (typeof entities.roles === "object") {
+      if (entities.roles.provider) {
+        if (entities.roles.provider === "supabase") {
+          excludeRoles.push(...[
+            "anon",
+            "authenticator",
+            "authenticated",
+            "service_role",
+            "supabase_auth_admin",
+            "supabase_storage_admin",
+            "dashboard_user",
+            "supabase_admin"
+          ]);
+        } else if (entities.roles.provider === "neon") {
+          excludeRoles.push(...["authenticated", "anonymous"]);
+        }
+      }
+      if (entities.roles.include) {
+        includeRoles.push(...entities.roles.include);
+      }
+      if (entities.roles.exclude) {
+        excludeRoles.push(...entities.roles.exclude);
+      }
+    } else {
+      useRoles = entities.roles;
+    }
+  }
+  return { useRoles, includeRoles, excludeRoles };
+}
 var import_drizzle_orm5, import_pg_core2, import_pg_core3, indexName2, generatePgSnapshot, trimChar, fromDatabase2, defaultForColumn, getColumnsInfoQuery;
 var init_pgSerializer = __esm({
   "src/serializer/pgSerializer.ts"() {
@@ -18970,16 +19125,28 @@ var init_pgSerializer = __esm({
     indexName2 = (tableName, columns) => {
       return `${tableName}_${columns.join("_")}_index`;
     };
-    generatePgSnapshot = (tables, enums, schemas, sequences, views, matViews, casing2, schemaFilter) => {
-      var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l;
+    generatePgSnapshot = (tables, enums, schemas, sequences, roles, policies, views, matViews, casing2, schemaFilter) => {
+      var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n;
       const dialect4 = new import_pg_core2.PgDialect({ casing: casing2 });
       const result = {};
       const resultViews = {};
       const sequencesToReturn = {};
+      const rolesToReturn = {};
       const indexesInSchema = {};
       for (const table4 of tables) {
         const checksInTable = {};
-        const { name: tableName, columns, indexes, foreignKeys, checks, schema: schema5, primaryKeys, uniqueConstraints } = (0, import_pg_core3.getTableConfig)(table4);
+        const {
+          name: tableName,
+          columns,
+          indexes,
+          foreignKeys,
+          checks,
+          schema: schema5,
+          primaryKeys,
+          uniqueConstraints,
+          policies: policies2,
+          enableRLS
+        } = (0, import_pg_core3.getTableConfig)(table4);
         if (schemaFilter && !schemaFilter.includes(schema5 ?? "public")) {
           continue;
         }
@@ -18989,6 +19156,7 @@ var init_pgSerializer = __esm({
         const foreignKeysObject = {};
         const primaryKeysObject = {};
         const uniqueConstraintObject = {};
+        const policiesObject = {};
         columns.forEach((column7) => {
           var _a2, _b2, _c2, _d2, _e2, _f2;
           const name = getColumnCasing(column7, casing2);
@@ -19238,6 +19406,46 @@ ${withStyle.errorWarning(
             with: value.config.with ?? {}
           };
         });
+        policies2.forEach((policy2) => {
+          var _a2, _b2;
+          const mappedTo = [];
+          if (!policy2.to) {
+            mappedTo.push("public");
+          } else {
+            if (policy2.to && typeof policy2.to === "string") {
+              mappedTo.push(policy2.to);
+            } else if (policy2.to && (0, import_drizzle_orm5.is)(policy2.to, import_pg_core2.PgRole)) {
+              mappedTo.push(policy2.to.name);
+            } else if (policy2.to && Array.isArray(policy2.to)) {
+              policy2.to.forEach((it) => {
+                if (typeof it === "string") {
+                  mappedTo.push(it);
+                } else if ((0, import_drizzle_orm5.is)(it, import_pg_core2.PgRole)) {
+                  mappedTo.push(it.name);
+                }
+              });
+            }
+          }
+          if (policiesObject[policy2.name] !== void 0) {
+            console.log(
+              `
+${withStyle.errorWarning(
+                `We've found duplicated policy name across ${source_default.underline.blue(tableKey2)} table. Please rename one of the policies with ${source_default.underline.blue(
+                  policy2.name
+                )} name`
+              )}`
+            );
+            process.exit(1);
+          }
+          policiesObject[policy2.name] = {
+            name: policy2.name,
+            as: ((_a2 = policy2.as) == null ? void 0 : _a2.toUpperCase()) ?? "PERMISSIVE",
+            for: ((_b2 = policy2.for) == null ? void 0 : _b2.toUpperCase()) ?? "ALL",
+            to: mappedTo.sort(),
+            using: (0, import_drizzle_orm5.is)(policy2.using, import_drizzle_orm5.SQL) ? dialect4.sqlToQuery(policy2.using).sql : void 0,
+            withCheck: (0, import_drizzle_orm5.is)(policy2.withCheck, import_drizzle_orm5.SQL) ? dialect4.sqlToQuery(policy2.withCheck).sql : void 0
+          };
+        });
         checks.forEach((check2) => {
           const checkName = check2.name;
           if (typeof checksInTable[`"${schema5 ?? "public"}"."${tableName}"`] !== "undefined") {
@@ -19274,17 +19482,69 @@ ${withStyle.errorWarning(
           foreignKeys: foreignKeysObject,
           compositePrimaryKeys: primaryKeysObject,
           uniqueConstraints: uniqueConstraintObject,
-          checkConstraints: checksObject
+          policies: policiesObject,
+          checkConstraints: checksObject,
+          isRLSEnabled: enableRLS
+        };
+      }
+      for (const policy2 of policies) {
+        if (!policy2._linkedTable) {
+          console.log(
+            `
+${withStyle.errorWarning(
+              `"Policy ${policy2.name} was skipped because it was not linked to any table. You should either include the policy in a table or use .link() on the policy to link it to any table you have. For more information, please check:`
+            )}`
+          );
+          continue;
+        }
+        const tableConfig = (0, import_pg_core3.getTableConfig)(policy2._linkedTable);
+        const tableKey2 = `${tableConfig.schema ?? "public"}.${tableConfig.name}`;
+        const mappedTo = [];
+        if (!policy2.to) {
+          mappedTo.push("public");
+        } else {
+          if (policy2.to && typeof policy2.to === "string") {
+            mappedTo.push(policy2.to);
+          } else if (policy2.to && (0, import_drizzle_orm5.is)(policy2.to, import_pg_core2.PgRole)) {
+            mappedTo.push(policy2.to.name);
+          } else if (policy2.to && Array.isArray(policy2.to)) {
+            policy2.to.forEach((it) => {
+              if (typeof it === "string") {
+                mappedTo.push(it);
+              } else if ((0, import_drizzle_orm5.is)(it, import_pg_core2.PgRole)) {
+                mappedTo.push(it.name);
+              }
+            });
+          }
+        }
+        if (result[tableKey2].policies[policy2.name] !== void 0) {
+          console.log(
+            `
+${withStyle.errorWarning(
+              `We've found duplicated policy name across ${source_default.underline.blue(tableKey2)} table. Please rename one of the policies with ${source_default.underline.blue(
+                policy2.name
+              )} name`
+            )}`
+          );
+          process.exit(1);
+        }
+        result[tableKey2].policies[policy2.name] = {
+          name: policy2.name,
+          as: ((_a = policy2.as) == null ? void 0 : _a.toUpperCase()) ?? "PERMISSIVE",
+          for: ((_b = policy2.for) == null ? void 0 : _b.toUpperCase()) ?? "ALL",
+          to: mappedTo.sort(),
+          using: (0, import_drizzle_orm5.is)(policy2.using, import_drizzle_orm5.SQL) ? dialect4.sqlToQuery(policy2.using).sql : void 0,
+          withCheck: (0, import_drizzle_orm5.is)(policy2.withCheck, import_drizzle_orm5.SQL) ? dialect4.sqlToQuery(policy2.withCheck).sql : void 0
         };
       }
       for (const sequence of sequences) {
         const name = sequence.seqName;
         if (typeof sequencesToReturn[`${sequence.schema ?? "public"}.${name}`] === "undefined") {
-          const increment = stringFromIdentityProperty((_a = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _a.increment) ?? "1";
-          const minValue = stringFromIdentityProperty((_b = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _b.minValue) ?? (parseFloat(increment) < 0 ? "-9223372036854775808" : "1");
-          const maxValue = stringFromIdentityProperty((_c = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _c.maxValue) ?? (parseFloat(increment) < 0 ? "-1" : "9223372036854775807");
-          const startWith = stringFromIdentityProperty((_d = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _d.startWith) ?? (parseFloat(increment) < 0 ? maxValue : minValue);
-          const cache = stringFromIdentityProperty((_e = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _e.cache) ?? "1";
+          const increment = stringFromIdentityProperty((_c = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _c.increment) ?? "1";
+          const minValue = stringFromIdentityProperty((_d = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _d.minValue) ?? (parseFloat(increment) < 0 ? "-9223372036854775808" : "1");
+          const maxValue = stringFromIdentityProperty((_e = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _e.maxValue) ?? (parseFloat(increment) < 0 ? "-1" : "9223372036854775807");
+          const startWith = stringFromIdentityProperty((_f = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _f.startWith) ?? (parseFloat(increment) < 0 ? maxValue : minValue);
+          const cache = stringFromIdentityProperty((_g = sequence == null ? void 0 : sequence.seqOptions) == null ? void 0 : _g.cache) ?? "1";
           sequencesToReturn[`${sequence.schema ?? "public"}.${name}`] = {
             name,
             schema: sequence.schema ?? "public",
@@ -19293,11 +19553,21 @@ ${withStyle.errorWarning(
             minValue,
             maxValue,
             cache,
-            cycle: ((_f = sequence.seqOptions) == null ? void 0 : _f.cycle) ?? false
+            cycle: ((_h = sequence.seqOptions) == null ? void 0 : _h.cycle) ?? false
           };
         } else {
         }
       }
+      for (const role of roles) {
+        if (!role._existing) {
+          rolesToReturn[role.name] = {
+            name: role.name,
+            createDb: role.createDb === void 0 ? false : role.createDb,
+            createRole: role.createRole === void 0 ? false : role.createRole,
+            inherit: role.inherit === void 0 ? true : role.inherit
+          };
+        }
+      }
       const combinedViews = [...views, ...matViews];
       for (const view4 of combinedViews) {
         let viewName;
@@ -19339,11 +19609,11 @@ ${withStyle.errorWarning(
             const typeSchema = (0, import_drizzle_orm5.is)(column7, import_pg_core2.PgEnumColumn) ? column7.enum.schema || "public" : void 0;
             const generated = column7.generated;
             const identity = column7.generatedIdentity;
-            const increment = stringFromIdentityProperty((_g = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _g.increment) ?? "1";
-            const minValue = stringFromIdentityProperty((_h = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _h.minValue) ?? (parseFloat(increment) < 0 ? minRangeForIdentityBasedOn(column7.columnType) : "1");
-            const maxValue = stringFromIdentityProperty((_i = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _i.maxValue) ?? (parseFloat(increment) < 0 ? "-1" : maxRangeForIdentityBasedOn(column7.getSQLType()));
-            const startWith = stringFromIdentityProperty((_j = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _j.startWith) ?? (parseFloat(increment) < 0 ? maxValue : minValue);
-            const cache = stringFromIdentityProperty((_k = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _k.cache) ?? "1";
+            const increment = stringFromIdentityProperty((_i = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _i.increment) ?? "1";
+            const minValue = stringFromIdentityProperty((_j = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _j.minValue) ?? (parseFloat(increment) < 0 ? minRangeForIdentityBasedOn(column7.columnType) : "1");
+            const maxValue = stringFromIdentityProperty((_k = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _k.maxValue) ?? (parseFloat(increment) < 0 ? "-1" : maxRangeForIdentityBasedOn(column7.getSQLType()));
+            const startWith = stringFromIdentityProperty((_l = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _l.startWith) ?? (parseFloat(increment) < 0 ? maxValue : minValue);
+            const cache = stringFromIdentityProperty((_m = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _m.cache) ?? "1";
             const columnToSet = {
               name: column7.name,
               type: column7.getSQLType(),
@@ -19363,7 +19633,7 @@ ${withStyle.errorWarning(
                 minValue,
                 maxValue,
                 cache,
-                cycle: ((_l = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _l.cycle) ?? false
+                cycle: ((_n = identity == null ? void 0 : identity.sequenceOptions) == null ? void 0 : _n.cycle) ?? false
               } : void 0
             };
             if (column7.isUnique) {
@@ -19454,6 +19724,7 @@ ${withStyle.errorWarning(
         enums: enumsToReturn,
         schemas: schemasObject,
         sequences: sequencesToReturn,
+        roles: rolesToReturn,
         views: resultViews,
         _meta: {
           schemas: {},
@@ -19471,7 +19742,7 @@ ${withStyle.errorWarning(
         --end;
       return start > 0 || end < str.length ? str.substring(start, end) : str.toString();
     };
-    fromDatabase2 = async (db, tablesFilter = () => true, schemaFilters, progressCallback) => {
+    fromDatabase2 = async (db, tablesFilter = () => true, schemaFilters, entities, progressCallback) => {
       const result = {};
       const views = {};
       const internals = { tables: {} };
@@ -19484,7 +19755,8 @@ ${withStyle.errorWarning(
         WHEN c.relkind = 'r' THEN 'table'
         WHEN c.relkind = 'v' THEN 'view'
         WHEN c.relkind = 'm' THEN 'materialized_view'
-    END AS type
+    END AS type,
+	c.relrowsecurity AS rls_enabled
 FROM 
     pg_catalog.pg_class c
 JOIN 
@@ -19570,6 +19842,64 @@ WHERE
       if (progressCallback) {
         progressCallback("enums", Object.keys(enumsToReturn).length, "done");
       }
+      const allRoles = await db.query(
+        `SELECT rolname, rolinherit, rolcreatedb, rolcreaterole FROM pg_roles;`
+      );
+      const rolesToReturn = {};
+      const preparedRoles = prepareRoles(entities);
+      if (preparedRoles.useRoles || !(preparedRoles.includeRoles.length === 0 && preparedRoles.excludeRoles.length === 0)) {
+        for (const dbRole of allRoles) {
+          if (preparedRoles.useRoles) {
+            rolesToReturn[dbRole.rolname] = {
+              createDb: dbRole.rolcreatedb,
+              createRole: dbRole.rolcreatedb,
+              inherit: dbRole.rolinherit,
+              name: dbRole.rolname
+            };
+          } else {
+            if (preparedRoles.includeRoles.length === 0 && preparedRoles.excludeRoles.length === 0)
+              continue;
+            if (preparedRoles.includeRoles.includes(dbRole.rolname) && preparedRoles.excludeRoles.includes(dbRole.rolname))
+              continue;
+            if (preparedRoles.excludeRoles.includes(dbRole.rolname))
+              continue;
+            if (!preparedRoles.includeRoles.includes(dbRole.rolname))
+              continue;
+            rolesToReturn[dbRole.rolname] = {
+              createDb: dbRole.rolcreatedb,
+              createRole: dbRole.rolcreaterole,
+              inherit: dbRole.rolinherit,
+              name: dbRole.rolname
+            };
+          }
+        }
+      }
+      const wherePolicies = schemaFilters.map((t2) => `schemaname = '${t2}'`).join(" or ");
+      const policiesByTable = {};
+      const allPolicies = await db.query(`SELECT schemaname, tablename, policyname as name, permissive as "as", roles as to, cmd as for, qual as using, with_check as "withCheck" FROM pg_policies${wherePolicies === "" ? "" : ` WHERE ${wherePolicies}`};`);
+      for (const dbPolicy of allPolicies) {
+        const { tablename, schemaname, to, withCheck, using, ...rest } = dbPolicy;
+        const tableForPolicy = policiesByTable[`${schemaname}.${tablename}`];
+        const parsedTo = to;
+        const parsedWithCheck = withCheck === null ? void 0 : withCheck;
+        const parsedUsing = using === null ? void 0 : using;
+        if (tableForPolicy) {
+          tableForPolicy[dbPolicy.name] = { ...rest, to: parsedTo };
+        } else {
+          policiesByTable[`${schemaname}.${tablename}`] = {
+            [dbPolicy.name]: { ...rest, to: parsedTo, withCheck: parsedWithCheck, using: parsedUsing }
+          };
+        }
+      }
+      if (progressCallback) {
+        progressCallback(
+          "policies",
+          Object.values(policiesByTable).reduce((total, innerRecord) => {
+            return total + Object.keys(innerRecord).length;
+          }, 0),
+          "done"
+        );
+      }
       const sequencesInColumns = [];
       const all = allTables.filter((it) => it.type === "table").map((row) => {
         return new Promise(async (res, rej) => {
@@ -19934,7 +20264,7 @@ WHERE
                     }
                   ],
                   isUnique: indexIsUnique,
-                  // should not be a part of diff detecs
+                  // should not be a part of diff detects
                   concurrently: false,
                   method: indexMethod,
                   where: indexWhere === null ? void 0 : indexWhere,
@@ -19954,7 +20284,9 @@ WHERE
               foreignKeys: foreignKeysToReturn,
               compositePrimaryKeys: primaryKeys,
               uniqueConstraints: uniqueConstrains,
-              checkConstraints
+              checkConstraints,
+              policies: policiesByTable[`${tableSchema}.${tableName}`] ?? {},
+              isRLSEnabled: row.rls_enabled
             };
           } catch (e2) {
             rej(e2);
@@ -20154,6 +20486,7 @@ WHERE
         enums: enumsToReturn,
         schemas: schemasObject,
         sequences: sequencesToReturn,
+        roles: rolesToReturn,
         views,
         _meta: {
           schemas: {},
@@ -21063,10 +21396,10 @@ ${filenames.join("\n")}
       const filenames = prepareFilenames(path5);
       const { prepareFromPgImports: prepareFromPgImports2 } = await Promise.resolve().then(() => (init_pgImports(), pgImports_exports));
       const { generatePgSnapshot: generatePgSnapshot2 } = await Promise.resolve().then(() => (init_pgSerializer(), pgSerializer_exports));
-      const { tables, enums, schemas, sequences, views, matViews } = await prepareFromPgImports2(
+      const { tables, enums, schemas, sequences, views, matViews, roles, policies } = await prepareFromPgImports2(
         filenames
       );
-      return generatePgSnapshot2(tables, enums, schemas, sequences, views, matViews, casing2, schemaFilter);
+      return generatePgSnapshot2(tables, enums, schemas, sequences, roles, policies, views, matViews, casing2, schemaFilter);
     };
     serializeSQLite = async (path5, casing2) => {
       const filenames = prepareFilenames(path5);
@@ -21261,57 +21594,57 @@ var require_heap = __commonJS({
         }
         return [].splice.apply(a, [lo, lo - lo].concat(x2)), x2;
       };
-      heappush = function(array, item, cmp) {
+      heappush = function(array2, item, cmp) {
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        array.push(item);
-        return _siftdown(array, 0, array.length - 1, cmp);
+        array2.push(item);
+        return _siftdown(array2, 0, array2.length - 1, cmp);
       };
-      heappop = function(array, cmp) {
+      heappop = function(array2, cmp) {
         var lastelt, returnitem;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        lastelt = array.pop();
-        if (array.length) {
-          returnitem = array[0];
-          array[0] = lastelt;
-          _siftup(array, 0, cmp);
+        lastelt = array2.pop();
+        if (array2.length) {
+          returnitem = array2[0];
+          array2[0] = lastelt;
+          _siftup(array2, 0, cmp);
         } else {
           returnitem = lastelt;
         }
         return returnitem;
       };
-      heapreplace = function(array, item, cmp) {
+      heapreplace = function(array2, item, cmp) {
         var returnitem;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        returnitem = array[0];
-        array[0] = item;
-        _siftup(array, 0, cmp);
+        returnitem = array2[0];
+        array2[0] = item;
+        _siftup(array2, 0, cmp);
         return returnitem;
       };
-      heappushpop = function(array, item, cmp) {
+      heappushpop = function(array2, item, cmp) {
         var _ref;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        if (array.length && cmp(array[0], item) < 0) {
-          _ref = [array[0], item], item = _ref[0], array[0] = _ref[1];
-          _siftup(array, 0, cmp);
+        if (array2.length && cmp(array2[0], item) < 0) {
+          _ref = [array2[0], item], item = _ref[0], array2[0] = _ref[1];
+          _siftup(array2, 0, cmp);
         }
         return item;
       };
-      heapify = function(array, cmp) {
+      heapify = function(array2, cmp) {
         var i2, _i, _j, _len, _ref, _ref1, _results, _results1;
         if (cmp == null) {
           cmp = defaultCmp;
         }
         _ref1 = function() {
           _results1 = [];
-          for (var _j2 = 0, _ref2 = floor(array.length / 2); 0 <= _ref2 ? _j2 < _ref2 : _j2 > _ref2; 0 <= _ref2 ? _j2++ : _j2--) {
+          for (var _j2 = 0, _ref2 = floor(array2.length / 2); 0 <= _ref2 ? _j2 < _ref2 : _j2 > _ref2; 0 <= _ref2 ? _j2++ : _j2--) {
             _results1.push(_j2);
           }
           return _results1;
@@ -21319,51 +21652,51 @@ var require_heap = __commonJS({
         _results = [];
         for (_i = 0, _len = _ref1.length; _i < _len; _i++) {
           i2 = _ref1[_i];
-          _results.push(_siftup(array, i2, cmp));
+          _results.push(_siftup(array2, i2, cmp));
         }
         return _results;
       };
-      updateItem = function(array, item, cmp) {
+      updateItem = function(array2, item, cmp) {
         var pos;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        pos = array.indexOf(item);
+        pos = array2.indexOf(item);
         if (pos === -1) {
           return;
         }
-        _siftdown(array, 0, pos, cmp);
-        return _siftup(array, pos, cmp);
+        _siftdown(array2, 0, pos, cmp);
+        return _siftup(array2, pos, cmp);
       };
-      nlargest = function(array, n, cmp) {
+      nlargest = function(array2, n, cmp) {
         var elem, result, _i, _len, _ref;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        result = array.slice(0, n);
+        result = array2.slice(0, n);
         if (!result.length) {
           return result;
         }
         heapify(result, cmp);
-        _ref = array.slice(n);
+        _ref = array2.slice(n);
         for (_i = 0, _len = _ref.length; _i < _len; _i++) {
           elem = _ref[_i];
           heappushpop(result, elem, cmp);
         }
         return result.sort(cmp).reverse();
       };
-      nsmallest = function(array, n, cmp) {
+      nsmallest = function(array2, n, cmp) {
         var elem, i2, los, result, _i, _j, _len, _ref, _ref1, _results;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        if (n * 10 <= array.length) {
-          result = array.slice(0, n).sort(cmp);
+        if (n * 10 <= array2.length) {
+          result = array2.slice(0, n).sort(cmp);
           if (!result.length) {
             return result;
           }
           los = result[result.length - 1];
-          _ref = array.slice(n);
+          _ref = array2.slice(n);
           for (_i = 0, _len = _ref.length; _i < _len; _i++) {
             elem = _ref[_i];
             if (cmp(elem, los) < 0) {
@@ -21374,51 +21707,51 @@ var require_heap = __commonJS({
           }
           return result;
         }
-        heapify(array, cmp);
+        heapify(array2, cmp);
         _results = [];
-        for (i2 = _j = 0, _ref1 = min(n, array.length); 0 <= _ref1 ? _j < _ref1 : _j > _ref1; i2 = 0 <= _ref1 ? ++_j : --_j) {
-          _results.push(heappop(array, cmp));
+        for (i2 = _j = 0, _ref1 = min(n, array2.length); 0 <= _ref1 ? _j < _ref1 : _j > _ref1; i2 = 0 <= _ref1 ? ++_j : --_j) {
+          _results.push(heappop(array2, cmp));
         }
         return _results;
       };
-      _siftdown = function(array, startpos, pos, cmp) {
+      _siftdown = function(array2, startpos, pos, cmp) {
         var newitem, parent, parentpos;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        newitem = array[pos];
+        newitem = array2[pos];
         while (pos > startpos) {
           parentpos = pos - 1 >> 1;
-          parent = array[parentpos];
+          parent = array2[parentpos];
           if (cmp(newitem, parent) < 0) {
-            array[pos] = parent;
+            array2[pos] = parent;
             pos = parentpos;
             continue;
           }
           break;
         }
-        return array[pos] = newitem;
+        return array2[pos] = newitem;
       };
-      _siftup = function(array, pos, cmp) {
+      _siftup = function(array2, pos, cmp) {
         var childpos, endpos, newitem, rightpos, startpos;
         if (cmp == null) {
           cmp = defaultCmp;
         }
-        endpos = array.length;
+        endpos = array2.length;
         startpos = pos;
-        newitem = array[pos];
+        newitem = array2[pos];
         childpos = 2 * pos + 1;
         while (childpos < endpos) {
           rightpos = childpos + 1;
-          if (rightpos < endpos && !(cmp(array[childpos], array[rightpos]) < 0)) {
+          if (rightpos < endpos && !(cmp(array2[childpos], array2[rightpos]) < 0)) {
             childpos = rightpos;
           }
-          array[pos] = array[childpos];
+          array2[pos] = array2[childpos];
           pos = childpos;
           childpos = 2 * pos + 1;
         }
-        array[pos] = newitem;
-        return _siftdown(array, startpos, pos, cmp);
+        array2[pos] = newitem;
+        return _siftdown(array2, startpos, pos, cmp);
       };
       Heap = function() {
         Heap2.push = heappush;
@@ -23331,12 +23664,12 @@ var require_lib = __commonJS({
         }
         return bestMatch;
       }
-      scalarize(array, originals, fuzzyOriginals) {
+      scalarize(array2, originals, fuzzyOriginals) {
         const fuzzyMatches = [];
         if (fuzzyOriginals) {
           const keyScores = {};
-          for (let index4 = 0; index4 < array.length; index4++) {
-            const item = array[index4];
+          for (let index4 = 0; index4 < array2.length; index4++) {
+            const item = array2[index4];
             if (this.isScalar(item)) {
               continue;
             }
@@ -23350,8 +23683,8 @@ var require_lib = __commonJS({
           }
         }
         const result = [];
-        for (let index4 = 0; index4 < array.length; index4++) {
-          const item = array[index4];
+        for (let index4 = 0; index4 < array2.length; index4++) {
+          const item = array2[index4];
           if (this.isScalar(item)) {
             result.push(item);
           } else {
@@ -23573,6 +23906,37 @@ function diffColumns(left, right) {
   );
   return alteredTables;
 }
+function diffPolicies(left, right) {
+  left = JSON.parse(JSON.stringify(left));
+  right = JSON.parse(JSON.stringify(right));
+  const result = (0, import_json_diff.diff)(left, right) ?? {};
+  const alteredTables = Object.fromEntries(
+    Object.entries(result).filter((it) => {
+      return !(it[0].includes("__added") || it[0].includes("__deleted"));
+    }).map((tableEntry) => {
+      const deletedPolicies = Object.entries(tableEntry[1].policies ?? {}).filter((it) => {
+        return it[0].endsWith("__deleted");
+      }).map((it) => {
+        return it[1];
+      });
+      const addedPolicies = Object.entries(tableEntry[1].policies ?? {}).filter((it) => {
+        return it[0].endsWith("__added");
+      }).map((it) => {
+        return it[1];
+      });
+      tableEntry[1].policies = {
+        added: addedPolicies,
+        deleted: deletedPolicies
+      };
+      const table4 = left[tableEntry[0]];
+      return [
+        tableEntry[0],
+        { name: table4.name, schema: table4.schema, ...tableEntry[1] }
+      ];
+    })
+  );
+  return alteredTables;
+}
 function applyJsonDiff(json1, json2) {
   json1 = JSON.parse(JSON.stringify(json1));
   json2 = JSON.parse(JSON.stringify(json2));
@@ -23582,6 +23946,7 @@ function applyJsonDiff(json1, json2) {
   difference.tables = difference.tables || {};
   difference.enums = difference.enums || {};
   difference.sequences = difference.sequences || {};
+  difference.roles = difference.roles || {};
   difference.views = difference.views || {};
   const schemaKeys = Object.keys(difference.schemas);
   for (let key of schemaKeys) {
@@ -23638,6 +24003,10 @@ function applyJsonDiff(json1, json2) {
   const alteredSequences = sequencesEntries.filter((it) => !(it[0].includes("__added") || it[0].includes("__deleted")) && "values" in it[1]).map((it) => {
     return json2.sequences[it[0]];
   });
+  const rolesEntries = Object.entries(difference.roles);
+  const alteredRoles = rolesEntries.filter((it) => !(it[0].includes("__added") || it[0].includes("__deleted"))).map((it) => {
+    return json2.roles[it[0]];
+  });
   const viewsEntries = Object.entries(difference.views);
   const alteredViews = viewsEntries.filter((it) => !(it[0].includes("__added") || it[0].includes("__deleted"))).map(
     ([nameWithSchema, view4]) => {
@@ -23717,6 +24086,7 @@ function applyJsonDiff(json1, json2) {
     alteredTablesWithColumns,
     alteredEnums,
     alteredSequences,
+    alteredRoles,
     alteredViews
   };
 }
@@ -23777,6 +24147,21 @@ var init_jsonDiffer = __esm({
           return !it[0].endsWith("__deleted") && !it[0].endsWith("__added");
         })
       );
+      const deletedPolicies = Object.fromEntries(
+        Object.entries(table4.policies__deleted || {}).concat(
+          Object.entries(table4.policies || {}).filter((it) => it[0].includes("__deleted"))
+        ).map((entry) => [entry[0].replace("__deleted", ""), entry[1]])
+      );
+      const addedPolicies = Object.fromEntries(
+        Object.entries(table4.policies__added || {}).concat(
+          Object.entries(table4.policies || {}).filter((it) => it[0].includes("__added"))
+        ).map((entry) => [entry[0].replace("__added", ""), entry[1]])
+      );
+      const alteredPolicies = Object.fromEntries(
+        Object.entries(table4.policies || {}).filter((it) => {
+          return !it[0].endsWith("__deleted") && !it[0].endsWith("__added");
+        })
+      );
       const deletedForeignKeys = Object.fromEntries(
         Object.entries(table4.foreignKeys__deleted || {}).concat(
           Object.entries(table4.foreignKeys || {}).filter((it) => it[0].includes("__deleted"))
@@ -23854,6 +24239,9 @@ var init_jsonDiffer = __esm({
         addedUniqueConstraints,
         deletedUniqueConstraints,
         alteredUniqueConstraints,
+        deletedPolicies,
+        addedPolicies,
+        alteredPolicies,
         addedCheckConstraints,
         deletedCheckConstraints,
         alteredCheckConstraints
@@ -24156,7 +24544,7 @@ function fromJson(statements, dialect4, action, json2) {
   }).filter((it) => it !== "");
   return result;
 }
-var pgNativeTypes, isPgNativeType, Convertor, PgCreateTableConvertor, MySqlCreateTableConvertor, SQLiteCreateTableConvertor, PgCreateViewConvertor, MySqlCreateViewConvertor, SqliteCreateViewConvertor, PgDropViewConvertor, MySqlDropViewConvertor, SqliteDropViewConvertor, MySqlAlterViewConvertor, PgRenameViewConvertor, MySqlRenameViewConvertor, PgAlterViewSchemaConvertor, PgAlterViewAddWithOptionConvertor, PgAlterViewDropWithOptionConvertor, PgAlterViewAlterTablespaceConvertor, PgAlterViewAlterUsingConvertor, PgAlterTableAlterColumnSetGenerated, PgAlterTableAlterColumnDropGenerated, PgAlterTableAlterColumnAlterGenerated, PgAlterTableAddUniqueConstraintConvertor, PgAlterTableDropUniqueConstraintConvertor, PgAlterTableAddCheckConstraintConvertor, PgAlterTableDeleteCheckConstraintConvertor, MySQLAlterTableAddUniqueConstraintConvertor, MySQLAlterTableDropUniqueConstraintConvertor, MySqlAlterTableAddCheckConstraintConvertor, MySqlAlterTableDeleteCheckConstraintConvertor, CreatePgSequenceConvertor, DropPgSequenceConvertor, RenamePgSequenceConvertor, MovePgSequenceConvertor, AlterPgSequenceConvertor, CreateTypeEnumConvertor, DropTypeEnumConvertor, AlterTypeAddValueConvertor, AlterTypeSetSchemaConvertor, AlterRenameTypeConvertor, AlterTypeDropValueConvertor, PgDropTableConvertor, MySQLDropTableConvertor, SQLiteDropTableConvertor, PgRenameTableConvertor, SqliteRenameTableConvertor, MySqlRenameTableConvertor, PgAlterTableRenameColumnConvertor, MySqlAlterTableRenameColumnConvertor, SQLiteAlterTableRenameColumnConvertor, PgAlterTableDropColumnConvertor, MySqlAlterTableDropColumnConvertor, SQLiteAlterTableDropColumnConvertor, PgAlterTableAddColumnConvertor, MySqlAlterTableAddColumnConvertor, SQLiteAlterTableAddColumnConvertor, PgAlterTableAlterColumnSetTypeConvertor, PgAlterTableAlterColumnSetDefaultConvertor, PgAlterTableAlterColumnDropDefaultConvertor, PgAlterTableAlterColumnDropGeneratedConvertor, PgAlterTableAlterColumnSetExpressionConvertor, PgAlterTableAlterColumnAlterrGeneratedConvertor, SqliteAlterTableAlterColumnDropGeneratedConvertor, SqliteAlterTableAlterColumnSetExpressionConvertor, SqliteAlterTableAlterColumnAlterGeneratedConvertor, MySqlAlterTableAlterColumnAlterrGeneratedConvertor, MySqlAlterTableAddPk, MySqlAlterTableDropPk, LibSQLModifyColumn, MySqlModifyColumn, PgAlterTableCreateCompositePrimaryKeyConvertor, PgAlterTableDeleteCompositePrimaryKeyConvertor, PgAlterTableAlterCompositePrimaryKeyConvertor, MySqlAlterTableCreateCompositePrimaryKeyConvertor, MySqlAlterTableDeleteCompositePrimaryKeyConvertor, MySqlAlterTableAlterCompositePrimaryKeyConvertor, PgAlterTableAlterColumnSetPrimaryKeyConvertor, PgAlterTableAlterColumnDropPrimaryKeyConvertor, PgAlterTableAlterColumnSetNotNullConvertor, PgAlterTableAlterColumnDropNotNullConvertor, PgCreateForeignKeyConvertor, LibSQLCreateForeignKeyConvertor, MySqlCreateForeignKeyConvertor, PgAlterForeignKeyConvertor, PgDeleteForeignKeyConvertor, MySqlDeleteForeignKeyConvertor, CreatePgIndexConvertor, CreateMySqlIndexConvertor, CreateSqliteIndexConvertor, PgDropIndexConvertor, PgCreateSchemaConvertor, PgRenameSchemaConvertor, PgDropSchemaConvertor, PgAlterTableSetSchemaConvertor, PgAlterTableSetNewSchemaConvertor, PgAlterTableRemoveFromSchemaConvertor, SqliteDropIndexConvertor, MySqlDropIndexConvertor, SQLiteRecreateTableConvertor, LibSQLRecreateTableConvertor, convertors;
+var pgNativeTypes, isPgNativeType, Convertor, PgCreateRoleConvertor, PgDropRoleConvertor, PgRenameRoleConvertor, PgAlterRoleConvertor, PgCreatePolicyConvertor, PgDropPolicyConvertor, PgRenamePolicyConvertor, PgAlterPolicyConvertor, PgEnableRlsConvertor, PgDisableRlsConvertor, PgCreateTableConvertor, MySqlCreateTableConvertor, SQLiteCreateTableConvertor, PgCreateViewConvertor, MySqlCreateViewConvertor, SqliteCreateViewConvertor, PgDropViewConvertor, MySqlDropViewConvertor, SqliteDropViewConvertor, MySqlAlterViewConvertor, PgRenameViewConvertor, MySqlRenameViewConvertor, PgAlterViewSchemaConvertor, PgAlterViewAddWithOptionConvertor, PgAlterViewDropWithOptionConvertor, PgAlterViewAlterTablespaceConvertor, PgAlterViewAlterUsingConvertor, PgAlterTableAlterColumnSetGenerated, PgAlterTableAlterColumnDropGenerated, PgAlterTableAlterColumnAlterGenerated, PgAlterTableAddUniqueConstraintConvertor, PgAlterTableDropUniqueConstraintConvertor, PgAlterTableAddCheckConstraintConvertor, PgAlterTableDeleteCheckConstraintConvertor, MySQLAlterTableAddUniqueConstraintConvertor, MySQLAlterTableDropUniqueConstraintConvertor, MySqlAlterTableAddCheckConstraintConvertor, MySqlAlterTableDeleteCheckConstraintConvertor, CreatePgSequenceConvertor, DropPgSequenceConvertor, RenamePgSequenceConvertor, MovePgSequenceConvertor, AlterPgSequenceConvertor, CreateTypeEnumConvertor, DropTypeEnumConvertor, AlterTypeAddValueConvertor, AlterTypeSetSchemaConvertor, AlterRenameTypeConvertor, AlterTypeDropValueConvertor, PgDropTableConvertor, MySQLDropTableConvertor, SQLiteDropTableConvertor, PgRenameTableConvertor, SqliteRenameTableConvertor, MySqlRenameTableConvertor, PgAlterTableRenameColumnConvertor, MySqlAlterTableRenameColumnConvertor, SQLiteAlterTableRenameColumnConvertor, PgAlterTableDropColumnConvertor, MySqlAlterTableDropColumnConvertor, SQLiteAlterTableDropColumnConvertor, PgAlterTableAddColumnConvertor, MySqlAlterTableAddColumnConvertor, SQLiteAlterTableAddColumnConvertor, PgAlterTableAlterColumnSetTypeConvertor, PgAlterTableAlterColumnSetDefaultConvertor, PgAlterTableAlterColumnDropDefaultConvertor, PgAlterTableAlterColumnDropGeneratedConvertor, PgAlterTableAlterColumnSetExpressionConvertor, PgAlterTableAlterColumnAlterrGeneratedConvertor, SqliteAlterTableAlterColumnDropGeneratedConvertor, SqliteAlterTableAlterColumnSetExpressionConvertor, SqliteAlterTableAlterColumnAlterGeneratedConvertor, MySqlAlterTableAlterColumnAlterrGeneratedConvertor, MySqlAlterTableAddPk, MySqlAlterTableDropPk, LibSQLModifyColumn, MySqlModifyColumn, PgAlterTableCreateCompositePrimaryKeyConvertor, PgAlterTableDeleteCompositePrimaryKeyConvertor, PgAlterTableAlterCompositePrimaryKeyConvertor, MySqlAlterTableCreateCompositePrimaryKeyConvertor, MySqlAlterTableDeleteCompositePrimaryKeyConvertor, MySqlAlterTableAlterCompositePrimaryKeyConvertor, PgAlterTableAlterColumnSetPrimaryKeyConvertor, PgAlterTableAlterColumnDropPrimaryKeyConvertor, PgAlterTableAlterColumnSetNotNullConvertor, PgAlterTableAlterColumnDropNotNullConvertor, PgCreateForeignKeyConvertor, LibSQLCreateForeignKeyConvertor, MySqlCreateForeignKeyConvertor, PgAlterForeignKeyConvertor, PgDeleteForeignKeyConvertor, MySqlDeleteForeignKeyConvertor, CreatePgIndexConvertor, CreateMySqlIndexConvertor, CreateSqliteIndexConvertor, PgDropIndexConvertor, PgCreateSchemaConvertor, PgRenameSchemaConvertor, PgDropSchemaConvertor, PgAlterTableSetSchemaConvertor, PgAlterTableSetNewSchemaConvertor, PgAlterTableRemoveFromSchemaConvertor, SqliteDropIndexConvertor, MySqlDropIndexConvertor, SQLiteRecreateTableConvertor, LibSQLRecreateTableConvertor, convertors;
 var init_sqlgenerator = __esm({
   "src/sqlgenerator.ts"() {
     "use strict";
@@ -24213,12 +24601,110 @@ var init_sqlgenerator = __esm({
     };
     Convertor = class {
     };
+    PgCreateRoleConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "create_role" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        return `CREATE ROLE "${statement.name}"${statement.values.createDb || statement.values.createRole || !statement.values.inherit ? ` WITH${statement.values.createDb ? " CREATEDB" : ""}${statement.values.createRole ? " CREATEROLE" : ""}${statement.values.inherit ? "" : " NOINHERIT"}` : ""};`;
+      }
+    };
+    PgDropRoleConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "drop_role" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        return `DROP ROLE "${statement.name}";`;
+      }
+    };
+    PgRenameRoleConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "rename_role" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        return `ALTER ROLE "${statement.nameFrom}" RENAME TO "${statement.nameTo}";`;
+      }
+    };
+    PgAlterRoleConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "alter_role" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        return `ALTER ROLE "${statement.name}"${` WITH${statement.values.createDb ? " CREATEDB" : " NOCREATEDB"}${statement.values.createRole ? " CREATEROLE" : " NOCREATEROLE"}${statement.values.inherit ? " INHERIT" : " NOINHERIT"}`};`;
+      }
+    };
+    PgCreatePolicyConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "create_policy" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        var _a, _b, _c;
+        const policy2 = statement.data;
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        const usingPart = policy2.using ? ` USING (${policy2.using})` : "";
+        const withCheckPart = policy2.withCheck ? ` WITH CHECK (${policy2.withCheck})` : "";
+        const policyToPart = (_a = policy2.to) == null ? void 0 : _a.map(
+          (v) => ["current_user", "current_role", "session_user", "public"].includes(v) ? v : `"${v}"`
+        ).join(", ");
+        return `CREATE POLICY "${policy2.name}" ON ${tableNameWithSchema} AS ${(_b = policy2.as) == null ? void 0 : _b.toUpperCase()} FOR ${(_c = policy2.for) == null ? void 0 : _c.toUpperCase()} TO ${policyToPart}${usingPart}${withCheckPart};`;
+      }
+    };
+    PgDropPolicyConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "drop_policy" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        const policy2 = statement.data;
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        return `DROP POLICY "${policy2.name}" ON ${tableNameWithSchema} CASCADE;`;
+      }
+    };
+    PgRenamePolicyConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "rename_policy" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        return `ALTER POLICY "${statement.oldName}" ON ${tableNameWithSchema} RENAME TO "${statement.newName}";`;
+      }
+    };
+    PgAlterPolicyConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "alter_policy" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        const newPolicy = PgSquasher.unsquashPolicy(statement.newData);
+        const oldPolicy = PgSquasher.unsquashPolicy(statement.oldData);
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        const usingPart = newPolicy.using ? ` USING (${newPolicy.using})` : oldPolicy.using ? ` USING (${oldPolicy.using})` : "";
+        const withCheckPart = newPolicy.withCheck ? ` WITH CHECK (${newPolicy.withCheck})` : oldPolicy.withCheck ? ` WITH CHECK  (${oldPolicy.withCheck})` : "";
+        return `ALTER POLICY "${oldPolicy.name}" ON ${tableNameWithSchema} TO ${newPolicy.to}${usingPart}${withCheckPart};`;
+      }
+    };
+    PgEnableRlsConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "enable_rls" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        return `ALTER TABLE ${tableNameWithSchema} ENABLE ROW LEVEL SECURITY;`;
+      }
+    };
+    PgDisableRlsConvertor = class extends Convertor {
+      can(statement, dialect4) {
+        return statement.type === "disable_rls" && dialect4 === "postgresql";
+      }
+      convert(statement) {
+        const tableNameWithSchema = statement.schema ? `"${statement.schema}"."${statement.tableName}"` : `"${statement.tableName}"`;
+        return `ALTER TABLE ${tableNameWithSchema} DISABLE ROW LEVEL SECURITY;`;
+      }
+    };
     PgCreateTableConvertor = class extends Convertor {
       can(statement, dialect4) {
         return statement.type === "create_table" && dialect4 === "postgresql";
       }
       convert(st) {
-        const { tableName, schema: schema5, columns, compositePKs, uniqueConstraints, checkConstraints } = st;
+        const { tableName, schema: schema5, columns, compositePKs, uniqueConstraints, checkConstraints, policies, isRLSEnabled } = st;
         let statement = "";
         const name = schema5 ? `"${schema5}"."${tableName}"` : `"${tableName}"`;
         statement += `CREATE TABLE IF NOT EXISTS ${name} (
@@ -24262,7 +24748,12 @@ var init_sqlgenerator = __esm({
 );`;
         statement += `
 `;
-        return statement;
+        const enableRls = new PgEnableRlsConvertor().convert({
+          type: "enable_rls",
+          tableName,
+          schema: schema5
+        });
+        return [statement, ...policies && policies.length > 0 || isRLSEnabled ? [enableRls] : []];
       }
     };
     MySqlCreateTableConvertor = class extends Convertor {
@@ -24867,9 +25358,21 @@ WITH ${withCheckOption} CHECK OPTION` : "";
         return statement.type === "drop_table" && dialect4 === "postgresql";
       }
       convert(statement) {
-        const { tableName, schema: schema5 } = statement;
+        const { tableName, schema: schema5, policies } = statement;
         const tableNameWithSchema = schema5 ? `"${schema5}"."${tableName}"` : `"${tableName}"`;
-        return `DROP TABLE ${tableNameWithSchema};`;
+        const dropPolicyConvertor = new PgDropPolicyConvertor();
+        const droppedPolicies = (policies == null ? void 0 : policies.map((p2) => {
+          return dropPolicyConvertor.convert({
+            type: "drop_policy",
+            tableName,
+            data: PgSquasher.unsquashPolicy(p2),
+            schema: schema5
+          });
+        })) ?? [];
+        return [
+          ...droppedPolicies,
+          `DROP TABLE ${tableNameWithSchema} CASCADE;`
+        ];
       }
     };
     MySQLDropTableConvertor = class extends Convertor {
@@ -26074,6 +26577,16 @@ ${BREAKPOINT}ALTER TABLE ${tableNameWithSchema} ADD CONSTRAINT ${statement.newCo
     convertors.push(new PgAlterTableAlterColumnDropNotNullConvertor());
     convertors.push(new PgAlterTableAlterColumnSetDefaultConvertor());
     convertors.push(new PgAlterTableAlterColumnDropDefaultConvertor());
+    convertors.push(new PgAlterPolicyConvertor());
+    convertors.push(new PgCreatePolicyConvertor());
+    convertors.push(new PgDropPolicyConvertor());
+    convertors.push(new PgRenamePolicyConvertor());
+    convertors.push(new PgEnableRlsConvertor());
+    convertors.push(new PgDisableRlsConvertor());
+    convertors.push(new PgDropRoleConvertor());
+    convertors.push(new PgAlterRoleConvertor());
+    convertors.push(new PgCreateRoleConvertor());
+    convertors.push(new PgRenameRoleConvertor());
     convertors.push(new PgAlterTableAlterColumnSetExpressionConvertor());
     convertors.push(new PgAlterTableAlterColumnDropGeneratedConvertor());
     convertors.push(new PgAlterTableAlterColumnAlterrGeneratedConvertor());
@@ -26374,7 +26887,7 @@ var init_sqlitePushUtils = __esm({
 });
 
 // src/jsonStatements.ts
-var preparePgCreateTableJson, prepareMySqlCreateTableJson, prepareSQLiteCreateTable, prepareDropTableJson, prepareRenameTableJson, prepareCreateEnumJson, prepareAddValuesToEnumJson, prepareDropEnumValues, prepareDropEnumJson, prepareMoveEnumJson, prepareRenameEnumJson, prepareCreateSequenceJson, prepareAlterSequenceJson, prepareDropSequenceJson, prepareMoveSequenceJson, prepareRenameSequenceJson, prepareCreateSchemasJson, prepareRenameSchemasJson, prepareDeleteSchemasJson, prepareRenameColumns, _prepareDropColumns, _prepareAddColumns, _prepareSqliteAddColumns, prepareAlterColumnsMysql, preparePgAlterColumns, prepareSqliteAlterColumns, preparePgCreateIndexesJson, prepareCreateIndexesJson, prepareCreateReferencesJson, prepareLibSQLCreateReferencesJson, prepareDropReferencesJson, prepareLibSQLDropReferencesJson, prepareAlterReferencesJson, prepareDropIndexesJson, prepareAddCompositePrimaryKeySqlite, prepareDeleteCompositePrimaryKeySqlite, prepareAlterCompositePrimaryKeySqlite, prepareAddCompositePrimaryKeyPg, prepareDeleteCompositePrimaryKeyPg, prepareAlterCompositePrimaryKeyPg, prepareAddUniqueConstraintPg, prepareDeleteUniqueConstraintPg, prepareAddCheckConstraint, prepareDeleteCheckConstraint, prepareAddCompositePrimaryKeyMySql, prepareDeleteCompositePrimaryKeyMySql, prepareAlterCompositePrimaryKeyMySql, preparePgCreateViewJson, prepareMySqlCreateViewJson, prepareSqliteCreateViewJson, prepareDropViewJson, prepareRenameViewJson, preparePgAlterViewAlterSchemaJson, preparePgAlterViewAddWithOptionJson, preparePgAlterViewDropWithOptionJson, preparePgAlterViewAlterTablespaceJson, preparePgAlterViewAlterUsingJson, prepareMySqlAlterView;
+var preparePgCreateTableJson, prepareMySqlCreateTableJson, prepareSQLiteCreateTable, prepareDropTableJson, prepareRenameTableJson, prepareCreateEnumJson, prepareAddValuesToEnumJson, prepareDropEnumValues, prepareDropEnumJson, prepareMoveEnumJson, prepareRenameEnumJson, prepareCreateSequenceJson, prepareAlterSequenceJson, prepareDropSequenceJson, prepareMoveSequenceJson, prepareRenameSequenceJson, prepareCreateRoleJson, prepareAlterRoleJson, prepareDropRoleJson, prepareRenameRoleJson, prepareCreateSchemasJson, prepareRenameSchemasJson, prepareDeleteSchemasJson, prepareRenameColumns, _prepareDropColumns, _prepareAddColumns, _prepareSqliteAddColumns, prepareAlterColumnsMysql, preparePgAlterColumns, prepareSqliteAlterColumns, prepareRenamePolicyJsons, prepareCreatePolicyJsons, prepareDropPolicyJsons, prepareAlterPolicyJson, preparePgCreateIndexesJson, prepareCreateIndexesJson, prepareCreateReferencesJson, prepareLibSQLCreateReferencesJson, prepareDropReferencesJson, prepareLibSQLDropReferencesJson, prepareAlterReferencesJson, prepareDropIndexesJson, prepareAddCompositePrimaryKeySqlite, prepareDeleteCompositePrimaryKeySqlite, prepareAlterCompositePrimaryKeySqlite, prepareAddCompositePrimaryKeyPg, prepareDeleteCompositePrimaryKeyPg, prepareAlterCompositePrimaryKeyPg, prepareAddUniqueConstraintPg, prepareDeleteUniqueConstraintPg, prepareAddCheckConstraint, prepareDeleteCheckConstraint, prepareAddCompositePrimaryKeyMySql, prepareDeleteCompositePrimaryKeyMySql, prepareAlterCompositePrimaryKeyMySql, preparePgCreateViewJson, prepareMySqlCreateViewJson, prepareSqliteCreateViewJson, prepareDropViewJson, prepareRenameViewJson, preparePgAlterViewAlterSchemaJson, preparePgAlterViewAddWithOptionJson, preparePgAlterViewDropWithOptionJson, preparePgAlterViewAlterTablespaceJson, preparePgAlterViewAlterUsingJson, prepareMySqlAlterView;
 var init_jsonStatements = __esm({
   "src/jsonStatements.ts"() {
     "use strict";
@@ -26385,7 +26898,7 @@ var init_jsonStatements = __esm({
     init_pgSchema();
     init_sqliteSchema();
     preparePgCreateTableJson = (table4, json2) => {
-      const { name, schema: schema5, columns, compositePrimaryKeys, uniqueConstraints, checkConstraints } = table4;
+      const { name, schema: schema5, columns, compositePrimaryKeys, uniqueConstraints, checkConstraints, policies, isRLSEnabled } = table4;
       const tableKey2 = `${schema5 || "public"}.${name}`;
       const compositePkName = Object.values(compositePrimaryKeys).length > 0 ? json2.tables[tableKey2].compositePrimaryKeys[`${PgSquasher.unsquashPK(Object.values(compositePrimaryKeys)[0]).name}`].name : "";
       return {
@@ -26396,7 +26909,9 @@ var init_jsonStatements = __esm({
         compositePKs: Object.values(compositePrimaryKeys),
         compositePkName,
         uniqueConstraints: Object.values(uniqueConstraints),
-        checkConstraints: Object.values(checkConstraints)
+        policies: Object.values(policies),
+        checkConstraints: Object.values(checkConstraints),
+        isRLSEnabled: isRLSEnabled ?? false
       };
     };
     prepareMySqlCreateTableJson = (table4, json2, internals) => {
@@ -26436,7 +26951,8 @@ var init_jsonStatements = __esm({
       return {
         type: "drop_table",
         tableName: table4.name,
-        schema: table4.schema
+        schema: table4.schema,
+        policies: table4.policies ? Object.values(table4.policies) : []
       };
     };
     prepareRenameTableJson = (tableFrom, tableTo) => {
@@ -26555,6 +27071,41 @@ var init_jsonStatements = __esm({
         schema: schema5
       };
     };
+    prepareCreateRoleJson = (role) => {
+      return {
+        type: "create_role",
+        name: role.name,
+        values: {
+          createDb: role.createDb,
+          createRole: role.createRole,
+          inherit: role.inherit
+        }
+      };
+    };
+    prepareAlterRoleJson = (role) => {
+      return {
+        type: "alter_role",
+        name: role.name,
+        values: {
+          createDb: role.createDb,
+          createRole: role.createRole,
+          inherit: role.inherit
+        }
+      };
+    };
+    prepareDropRoleJson = (name) => {
+      return {
+        type: "drop_role",
+        name
+      };
+    };
+    prepareRenameRoleJson = (nameFrom, nameTo) => {
+      return {
+        type: "rename_role",
+        nameFrom,
+        nameTo
+      };
+    };
     prepareCreateSchemasJson = (values) => {
       return values.map((it) => {
         return {
@@ -27455,6 +28006,46 @@ var init_jsonStatements = __esm({
       }
       return [...dropPkStatements, ...setPkStatements, ...statements];
     };
+    prepareRenamePolicyJsons = (tableName, schema5, renames) => {
+      return renames.map((it) => {
+        return {
+          type: "rename_policy",
+          tableName,
+          oldName: it.from.name,
+          newName: it.to.name,
+          schema: schema5
+        };
+      });
+    };
+    prepareCreatePolicyJsons = (tableName, schema5, policies) => {
+      return policies.map((it) => {
+        return {
+          type: "create_policy",
+          tableName,
+          data: it,
+          schema: schema5
+        };
+      });
+    };
+    prepareDropPolicyJsons = (tableName, schema5, policies) => {
+      return policies.map((it) => {
+        return {
+          type: "drop_policy",
+          tableName,
+          data: it,
+          schema: schema5
+        };
+      });
+    };
+    prepareAlterPolicyJson = (tableName, schema5, oldPolicy, newPolicy) => {
+      return {
+        type: "alter_policy",
+        tableName,
+        oldData: oldPolicy,
+        newData: newPolicy,
+        schema: schema5
+      };
+    };
     preparePgCreateIndexesJson = (tableName, schema5, indexes, fullSchema, action) => {
       if (action === "push") {
         return Object.values(indexes).map((indexData) => {
@@ -28253,7 +28844,9 @@ var init_snapshotsDiffer = __esm({
       foreignKeys: recordType(stringType(), stringType()),
       compositePrimaryKeys: recordType(stringType(), stringType()).default({}),
       uniqueConstraints: recordType(stringType(), stringType()).default({}),
-      checkConstraints: recordType(stringType(), stringType()).default({})
+      policies: recordType(stringType(), stringType()).default({}),
+      checkConstraints: recordType(stringType(), stringType()).default({}),
+      isRLSEnabled: booleanType().default(false)
     }).strict();
     alteredTableScheme = objectType({
       name: stringType(),
@@ -28295,6 +28888,15 @@ var init_snapshotsDiffer = __esm({
           __old: stringType()
         })
       ),
+      addedPolicies: recordType(stringType(), stringType()),
+      deletedPolicies: recordType(stringType(), stringType()),
+      alteredPolicies: recordType(
+        stringType(),
+        objectType({
+          __new: stringType(),
+          __old: stringType()
+        })
+      ),
       addedCheckConstraints: recordType(
         stringType(),
         stringType()
@@ -28356,6 +28958,7 @@ var init_snapshotsDiffer = __esm({
       alteredTablesWithColumns: alteredTableScheme.array(),
       alteredEnums: changedEnumSchema.array(),
       alteredSequences: sequenceSquashed.array(),
+      alteredRoles: roleSchema.array(),
       alteredViews: alteredPgViewSchema.array()
     }).strict();
     diffResultSchemeMysql = objectType({
@@ -28413,7 +29016,7 @@ var init_snapshotsDiffer = __esm({
       }
       return column7;
     };
-    applyPgSnapshotsDiff = async (json1, json2, schemasResolver2, enumsResolver2, sequencesResolver2, tablesResolver2, columnsResolver2, viewsResolver2, prevFull, curFull, action) => {
+    applyPgSnapshotsDiff = async (json1, json2, schemasResolver2, enumsResolver2, sequencesResolver2, policyResolver2, roleResolver2, tablesResolver2, columnsResolver2, viewsResolver2, prevFull, curFull, action) => {
       const schemasDiff = diffSchemasOrTables(json1.schemas, json2.schemas);
       const {
         created: createdSchemas,
@@ -28563,6 +29166,47 @@ var init_snapshotsDiffer = __esm({
           return [tableKey2, tableValue];
         }
       );
+      const rolesDiff = diffSchemasOrTables(
+        schemasPatchedSnap1.roles,
+        json2.roles
+      );
+      const {
+        created: createdRoles,
+        deleted: deletedRoles,
+        renamed: renamedRoles
+      } = await roleResolver2({
+        created: rolesDiff.added,
+        deleted: rolesDiff.deleted
+      });
+      schemasPatchedSnap1.roles = mapEntries(
+        schemasPatchedSnap1.roles,
+        (_2, it) => {
+          const { name } = nameChangeFor(it, renamedRoles);
+          it.name = name;
+          return [name, it];
+        }
+      );
+      const rolesChangeMap = renamedRoles.reduce(
+        (acc, it) => {
+          acc[it.from.name] = {
+            nameFrom: it.from.name,
+            nameTo: it.to.name
+          };
+          return acc;
+        },
+        {}
+      );
+      schemasPatchedSnap1.roles = mapEntries(
+        schemasPatchedSnap1.roles,
+        (roleKey, roleValue) => {
+          const key = roleKey;
+          const change = rolesChangeMap[key];
+          if (change) {
+            roleValue.name = change.nameTo;
+          }
+          return [roleKey, roleValue];
+        }
+      );
       const tablesDiff = diffSchemasOrTables(
         schemasPatchedSnap1.tables,
         json2.tables
@@ -28641,7 +29285,66 @@ var init_snapshotsDiffer = __esm({
           return [tableKey2, tableValue];
         }
       );
-      const viewsDiff = diffSchemasOrTables(json1.views, json2.views);
+      const policyRes = diffPolicies(tablesPatchedSnap1.tables, json2.tables);
+      const policyRenames = [];
+      const policyCreates = [];
+      const policyDeletes = [];
+      for (let entry of Object.values(policyRes)) {
+        const { renamed, created, deleted } = await policyResolver2({
+          tableName: entry.name,
+          schema: entry.schema,
+          deleted: entry.policies.deleted.map(PgSquasher.unsquashPolicy),
+          created: entry.policies.added.map(PgSquasher.unsquashPolicy)
+        });
+        if (created.length > 0) {
+          policyCreates.push({
+            table: entry.name,
+            schema: entry.schema,
+            columns: created
+          });
+        }
+        if (deleted.length > 0) {
+          policyDeletes.push({
+            table: entry.name,
+            schema: entry.schema,
+            columns: deleted
+          });
+        }
+        if (renamed.length > 0) {
+          policyRenames.push({
+            table: entry.name,
+            schema: entry.schema,
+            renames: renamed
+          });
+        }
+      }
+      const policyRenamesDict = columnRenames.reduce(
+        (acc, it) => {
+          acc[`${it.schema || "public"}.${it.table}`] = it.renames;
+          return acc;
+        },
+        {}
+      );
+      const policyPatchedSnap1 = copy(tablesPatchedSnap1);
+      policyPatchedSnap1.tables = mapEntries(
+        policyPatchedSnap1.tables,
+        (tableKey2, tableValue) => {
+          const patchedPolicies = mapKeys(
+            tableValue.policies,
+            (policyKey, policy2) => {
+              const rens = policyRenamesDict[`${tableValue.schema || "public"}.${tableValue.name}`] || [];
+              const newName = columnChangeFor(policyKey, rens);
+              const unsquashedPolicy = PgSquasher.unsquashPolicy(policy2);
+              unsquashedPolicy.name = newName;
+              policy2 = PgSquasher.squashPolicy(unsquashedPolicy);
+              return newName;
+            }
+          );
+          tableValue.policies = patchedPolicies;
+          return [tableKey2, tableValue];
+        }
+      );
+      const viewsDiff = diffSchemasOrTables(policyPatchedSnap1.views, json2.views);
       const {
         created: createdViews,
         deleted: deletedViews,
@@ -28659,7 +29362,7 @@ var init_snapshotsDiffer = __esm({
       movedViews.forEach((it) => {
         movedViewDic[`${it.schemaFrom}.${it.name}`] = { to: it.schemaTo, from: it.schemaFrom };
       });
-      const viewsPatchedSnap1 = copy(columnsPatchedSnap1);
+      const viewsPatchedSnap1 = copy(policyPatchedSnap1);
       viewsPatchedSnap1.views = mapEntries(
         viewsPatchedSnap1.views,
         (viewKey, viewValue) => {
@@ -28718,13 +29421,15 @@ var init_snapshotsDiffer = __esm({
       const jsonDeletedUniqueConstraints = [];
       const jsonAlteredUniqueConstraints = [];
       const jsonSetTableSchemas = [];
-      for (let it of movedTables) {
-        jsonSetTableSchemas.push({
-          type: "alter_table_set_schema",
-          tableName: it.name,
-          schemaFrom: it.schemaFrom || "public",
-          schemaTo: it.schemaTo || "public"
-        });
+      if (movedTables) {
+        for (let it of movedTables) {
+          jsonSetTableSchemas.push({
+            type: "alter_table_set_schema",
+            tableName: it.name,
+            schemaFrom: it.schemaFrom || "public",
+            schemaTo: it.schemaTo || "public"
+          });
+        }
       }
       const jsonDeletedCheckConstraints = [];
       const jsonCreatedCheckConstraints = [];
@@ -28851,7 +29556,106 @@ var init_snapshotsDiffer = __esm({
           it.deletedIndexes || {}
         );
       }).flat();
+      const jsonCreatePoliciesStatements = [];
+      const jsonDropPoliciesStatements = [];
+      const jsonAlterPoliciesStatements = [];
+      const jsonRenamePoliciesStatements = [];
+      const jsonEnableRLSStatements = [];
+      const jsonDisableRLSStatements = [];
+      for (let it of policyRenames) {
+        jsonRenamePoliciesStatements.push(
+          ...prepareRenamePolicyJsons(it.table, it.schema, it.renames)
+        );
+      }
+      for (const it of policyCreates) {
+        jsonCreatePoliciesStatements.push(
+          ...prepareCreatePolicyJsons(
+            it.table,
+            it.schema,
+            it.columns
+          )
+        );
+      }
+      for (const it of policyDeletes) {
+        jsonDropPoliciesStatements.push(
+          ...prepareDropPolicyJsons(
+            it.table,
+            it.schema,
+            it.columns
+          )
+        );
+      }
       alteredTables.forEach((it) => {
+        Object.keys(it.alteredPolicies).forEach((policyName) => {
+          const newPolicy = PgSquasher.unsquashPolicy(it.alteredPolicies[policyName].__new);
+          const oldPolicy = PgSquasher.unsquashPolicy(it.alteredPolicies[policyName].__old);
+          if (newPolicy.as !== oldPolicy.as) {
+            jsonDropPoliciesStatements.push(
+              ...prepareDropPolicyJsons(
+                it.name,
+                it.schema,
+                [oldPolicy]
+              )
+            );
+            jsonCreatePoliciesStatements.push(
+              ...prepareCreatePolicyJsons(
+                it.name,
+                it.schema,
+                [newPolicy]
+              )
+            );
+            return;
+          }
+          if (newPolicy.for !== oldPolicy.for) {
+            jsonDropPoliciesStatements.push(
+              ...prepareDropPolicyJsons(
+                it.name,
+                it.schema,
+                [oldPolicy]
+              )
+            );
+            jsonCreatePoliciesStatements.push(
+              ...prepareCreatePolicyJsons(
+                it.name,
+                it.schema,
+                [newPolicy]
+              )
+            );
+            return;
+          }
+          jsonAlterPoliciesStatements.push(
+            prepareAlterPolicyJson(
+              it.name,
+              it.schema,
+              it.alteredPolicies[policyName].__old,
+              it.alteredPolicies[policyName].__new
+            )
+          );
+        });
+        for (const table4 of Object.values(json2.tables)) {
+          const policiesInCurrentState = Object.keys(table4.policies);
+          const tableInPreviousState = columnsPatchedSnap1.tables[`${table4.schema === "" ? "public" : table4.schema}.${table4.name}`];
+          const policiesInPreviousState = tableInPreviousState ? Object.keys(tableInPreviousState.policies) : [];
+          if (policiesInPreviousState.length === 0 && policiesInCurrentState.length > 0 && !table4.isRLSEnabled) {
+            jsonEnableRLSStatements.push({ type: "enable_rls", tableName: table4.name, schema: table4.schema });
+          }
+          if (policiesInPreviousState.length > 0 && policiesInCurrentState.length === 0 && !table4.isRLSEnabled) {
+            jsonDisableRLSStatements.push({ type: "disable_rls", tableName: table4.name, schema: table4.schema });
+          }
+          if (table4.isRLSEnabled !== tableInPreviousState.isRLSEnabled) {
+            if (table4.isRLSEnabled) {
+              jsonEnableRLSStatements.push({ type: "enable_rls", tableName: table4.name, schema: table4.schema });
+            } else if (!table4.isRLSEnabled && policiesInCurrentState.length === 0) {
+              jsonDisableRLSStatements.push({ type: "disable_rls", tableName: table4.name, schema: table4.schema });
+            }
+          }
+        }
+        for (const table4 of Object.values(columnsPatchedSnap1.tables)) {
+          const tableInCurrentState = json2.tables[`${table4.schema === "" ? "public" : table4.schema}.${table4.name}`];
+          if (tableInCurrentState === void 0 && !table4.isRLSEnabled) {
+            jsonDisableRLSStatements.push({ type: "disable_rls", tableName: table4.name, schema: table4.schema });
+          }
+        }
         const droppedIndexes = Object.keys(it.alteredIndexes).reduce(
           (current, item) => {
             current[item] = it.alteredIndexes[item].__old;
@@ -28939,6 +29743,18 @@ var init_snapshotsDiffer = __esm({
       const jsonAlterSequences = typedResult.alteredSequences.map((it) => {
         return prepareAlterSequenceJson(it);
       }).flat() ?? [];
+      const createRoles = createdRoles.map((it) => {
+        return prepareCreateRoleJson(it);
+      }) ?? [];
+      const dropRoles = deletedRoles.map((it) => {
+        return prepareDropRoleJson(it.name);
+      });
+      const renameRoles = renamedRoles.map((it) => {
+        return prepareRenameRoleJson(it.from.name, it.to.name);
+      });
+      const jsonAlterRoles = typedResult.alteredRoles.map((it) => {
+        return prepareAlterRoleJson(it);
+      }).flat() ?? [];
       const createSchemas = prepareCreateSchemasJson(
         createdSchemas.map((it) => it.name)
       );
@@ -28951,6 +29767,11 @@ var init_snapshotsDiffer = __esm({
       const createTables = createdTables.map((it) => {
         return preparePgCreateTableJson(it, curFull);
       });
+      jsonCreatePoliciesStatements.push(...[].concat(
+        ...createdTables.map(
+          (it) => prepareCreatePolicyJsons(it.name, it.schema, Object.values(it.policies).map(PgSquasher.unsquashPolicy))
+        )
+      ));
       const createViews = [];
       const dropViews = [];
       const renameViews = [];
@@ -29092,7 +29913,13 @@ var init_snapshotsDiffer = __esm({
       jsonStatements.push(...moveSequences);
       jsonStatements.push(...renameSequences);
       jsonStatements.push(...jsonAlterSequences);
+      jsonStatements.push(...renameRoles);
+      jsonStatements.push(...dropRoles);
+      jsonStatements.push(...createRoles);
+      jsonStatements.push(...jsonAlterRoles);
       jsonStatements.push(...createTables);
+      jsonStatements.push(...jsonEnableRLSStatements);
+      jsonStatements.push(...jsonDisableRLSStatements);
       jsonStatements.push(...dropViews);
       jsonStatements.push(...renameViews);
       jsonStatements.push(...alterViews);
@@ -29118,6 +29945,10 @@ var init_snapshotsDiffer = __esm({
       jsonStatements.push(...jsonCreatedCheckConstraints);
       jsonStatements.push(...jsonAlteredUniqueConstraints);
       jsonStatements.push(...jsonAlterEnumsWithDroppedValues);
+      jsonStatements.push(...jsonRenamePoliciesStatements);
+      jsonStatements.push(...jsonDropPoliciesStatements);
+      jsonStatements.push(...jsonCreatePoliciesStatements);
+      jsonStatements.push(...jsonAlterPoliciesStatements);
       jsonStatements.push(...createViews);
       jsonStatements.push(...dropEnums);
       jsonStatements.push(...dropSequences);
@@ -31703,6 +32534,7 @@ __export(migrate_exports, {
   embeddedMigrations: () => embeddedMigrations,
   enumsResolver: () => enumsResolver,
   mySqlViewsResolver: () => mySqlViewsResolver,
+  policyResolver: () => policyResolver,
   prepareAndMigrateLibSQL: () => prepareAndMigrateLibSQL,
   prepareAndMigrateMysql: () => prepareAndMigrateMysql,
   prepareAndMigratePg: () => prepareAndMigratePg,
@@ -31713,8 +32545,10 @@ __export(migrate_exports, {
   prepareSQLitePush: () => prepareSQLitePush,
   prepareSnapshotFolderName: () => prepareSnapshotFolderName,
   promptColumnsConflicts: () => promptColumnsConflicts,
+  promptNamedConflict: () => promptNamedConflict,
   promptNamedWithSchemasConflict: () => promptNamedWithSchemasConflict,
   promptSchemasConflict: () => promptSchemasConflict,
+  roleResolver: () => roleResolver,
   schemasResolver: () => schemasResolver,
   sequencesResolver: () => sequencesResolver,
   sqliteViewsResolver: () => sqliteViewsResolver,
@@ -31722,7 +32556,7 @@ __export(migrate_exports, {
   viewsResolver: () => viewsResolver,
   writeResult: () => writeResult
 });
-var import_fs5, import_hanji3, import_path4, schemasResolver, tablesResolver, viewsResolver, mySqlViewsResolver, sqliteViewsResolver, sequencesResolver, enumsResolver, columnsResolver, prepareAndMigratePg, preparePgPush, prepareMySQLPush, prepareAndMigrateMysql, prepareAndMigrateSqlite, prepareAndMigrateLibSQL, prepareSQLitePush, prepareLibSQLPush, promptColumnsConflicts, promptNamedWithSchemasConflict, promptSchemasConflict, BREAKPOINT, writeResult, embeddedMigrations, prepareSnapshotFolderName, two;
+var import_fs5, import_hanji3, import_path4, schemasResolver, tablesResolver, viewsResolver, mySqlViewsResolver, sqliteViewsResolver, sequencesResolver, roleResolver, policyResolver, enumsResolver, columnsResolver, prepareAndMigratePg, preparePgPush, prepareMySQLPush, prepareAndMigrateMysql, prepareAndMigrateSqlite, prepareAndMigrateLibSQL, prepareSQLitePush, prepareLibSQLPush, promptColumnsConflicts, promptNamedConflict, promptNamedWithSchemasConflict, promptSchemasConflict, BREAKPOINT, writeResult, embeddedMigrations, prepareSnapshotFolderName, two;
 var init_migrate = __esm({
   "src/cli/commands/migrate.ts"() {
     "use strict";
@@ -31841,6 +32675,32 @@ var init_migrate = __esm({
         throw e2;
       }
     };
+    roleResolver = async (input) => {
+      const result = await promptNamedConflict(
+        input.created,
+        input.deleted,
+        "role"
+      );
+      return {
+        created: result.created,
+        deleted: result.deleted,
+        renamed: result.renamed
+      };
+    };
+    policyResolver = async (input) => {
+      const result = await promptColumnsConflicts(
+        input.tableName,
+        input.created,
+        input.deleted
+      );
+      return {
+        tableName: input.tableName,
+        schema: input.schema,
+        created: result.created,
+        deleted: result.deleted,
+        renamed: result.renamed
+      };
+    };
     enumsResolver = async (input) => {
       try {
         const { created, deleted, moved, renamed } = await promptNamedWithSchemasConflict(
@@ -31911,6 +32771,8 @@ var init_migrate = __esm({
           schemasResolver,
           enumsResolver,
           sequencesResolver,
+          policyResolver,
+          roleResolver,
           tablesResolver,
           columnsResolver,
           viewsResolver,
@@ -31947,6 +32809,8 @@ var init_migrate = __esm({
         schemasResolver,
         enumsResolver,
         sequencesResolver,
+        policyResolver,
+        roleResolver,
         tablesResolver,
         columnsResolver,
         viewsResolver,
@@ -32241,6 +33105,56 @@ var init_migrate = __esm({
       result.deleted.push(...leftMissing);
       return result;
     };
+    promptNamedConflict = async (newItems, missingItems, entity) => {
+      if (missingItems.length === 0 || newItems.length === 0) {
+        return {
+          created: newItems,
+          renamed: [],
+          deleted: missingItems
+        };
+      }
+      const result = { created: [], renamed: [], deleted: [] };
+      let index4 = 0;
+      let leftMissing = [...missingItems];
+      do {
+        const created = newItems[index4];
+        const renames = leftMissing.map((it) => {
+          return { from: it, to: created };
+        });
+        const promptData = [created, ...renames];
+        const { status, data } = await (0, import_hanji3.render)(
+          new ResolveSelectNamed(created, promptData, entity)
+        );
+        if (status === "aborted") {
+          console.error("ERROR");
+          process.exit(1);
+        }
+        if (isRenamePromptItem(data)) {
+          console.log(
+            `${source_default.yellow("~")} ${data.from.name} \u203A ${data.to.name} ${source_default.gray(
+              `${entity} will be renamed/moved`
+            )}`
+          );
+          if (data.from.name !== data.to.name) {
+            result.renamed.push(data);
+          }
+          delete leftMissing[leftMissing.indexOf(data.from)];
+          leftMissing = leftMissing.filter(Boolean);
+        } else {
+          console.log(
+            `${source_default.green("+")} ${data.name} ${source_default.gray(
+              `${entity} will be created`
+            )}`
+          );
+          result.created.push(created);
+        }
+        index4 += 1;
+      } while (index4 < newItems.length);
+      console.log(source_default.gray(`--- all ${entity} conflicts resolved ---
+`));
+      result.deleted.push(...leftMissing);
+      return result;
+    };
     promptNamedWithSchemasConflict = async (newItems, missingItems, entity) => {
       if (missingItems.length === 0 || newItems.length === 0) {
         return {
@@ -41069,9 +41983,9 @@ var init_body2 = __esm({
 // ../node_modules/.pnpm/node-fetch@3.3.2/node_modules/node-fetch/src/headers.js
 function fromRawHeaders(headers = []) {
   return new Headers2(
-    headers.reduce((result, value, index4, array) => {
+    headers.reduce((result, value, index4, array2) => {
       if (index4 % 2 === 0) {
-        result.push(array.slice(index4, index4 + 2));
+        result.push(array2.slice(index4, index4 + 2));
       }
       return result;
     }, []).filter(([name, value]) => {
@@ -41469,7 +42383,7 @@ function determineRequestsReferrer(request, { referrerURLCallback, referrerOrigi
   if (request.referrer === "no-referrer" || request.referrerPolicy === "") {
     return null;
   }
-  const policy = request.referrerPolicy;
+  const policy2 = request.referrerPolicy;
   if (request.referrer === "about:client") {
     return "no-referrer";
   }
@@ -41486,7 +42400,7 @@ function determineRequestsReferrer(request, { referrerURLCallback, referrerOrigi
     referrerOrigin = referrerOriginCallback(referrerOrigin);
   }
   const currentURL = new URL(request.url);
-  switch (policy) {
+  switch (policy2) {
     case "no-referrer":
       return "no-referrer";
     case "origin":
@@ -41522,18 +42436,18 @@ function determineRequestsReferrer(request, { referrerURLCallback, referrerOrigi
       }
       return referrerURL;
     default:
-      throw new TypeError(`Invalid referrerPolicy: ${policy}`);
+      throw new TypeError(`Invalid referrerPolicy: ${policy2}`);
   }
 }
 function parseReferrerPolicyFromHeader(headers) {
   const policyTokens = (headers.get("referrer-policy") || "").split(/[,\s]+/);
-  let policy = "";
+  let policy2 = "";
   for (const token of policyTokens) {
     if (token && ReferrerPolicy.has(token)) {
-      policy = token;
+      policy2 = token;
     }
   }
-  return policy;
+  return policy2;
 }
 var import_node_net, ReferrerPolicy, DEFAULT_REFERRER_POLICY;
 var init_referrer = __esm({
@@ -62180,7 +63094,7 @@ var require_fromWebToken = __commonJS({
     var fromWebToken2 = (init2) => async () => {
       var _a;
       (_a = init2.logger) == null ? void 0 : _a.debug("@aws-sdk/credential-provider-web-identity", "fromWebToken");
-      const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy, durationSeconds } = init2;
+      const { roleArn, roleSessionName, webIdentityToken, providerId, policyArns, policy: policy2, durationSeconds } = init2;
       let { roleAssumerWithWebIdentity } = init2;
       if (!roleAssumerWithWebIdentity) {
         const { getDefaultRoleAssumerWithWebIdentity } = await Promise.resolve().then(() => __importStar2(require_dist_cjs50()));
@@ -62196,7 +63110,7 @@ var require_fromWebToken = __commonJS({
         WebIdentityToken: webIdentityToken,
         ProviderId: providerId,
         PolicyArns: policyArns,
-        Policy: policy,
+        Policy: policy2,
         DurationSeconds: durationSeconds
       });
     };
@@ -65660,13 +66574,13 @@ var require_event_stream = __commonJS({
     es.writeArray = function(done) {
       if ("function" !== typeof done)
         throw new Error("function writeArray (done): done must be function");
-      var a = new Stream3(), array = [], isDone = false;
+      var a = new Stream3(), array2 = [], isDone = false;
       a.write = function(l) {
-        array.push(l);
+        array2.push(l);
       };
       a.end = function() {
         isDone = true;
-        done(null, array);
+        done(null, array2);
       };
       a.writable = true;
       a.readable = false;
@@ -65674,23 +66588,23 @@ var require_event_stream = __commonJS({
         a.writable = a.readable = false;
         if (isDone)
           return;
-        done(new Error("destroyed before end"), array);
+        done(new Error("destroyed before end"), array2);
       };
       return a;
     };
-    es.readArray = function(array) {
+    es.readArray = function(array2) {
       var stream = new Stream3(), i2 = 0, paused = false, ended = false;
       stream.readable = true;
       stream.writable = false;
-      if (!Array.isArray(array))
+      if (!Array.isArray(array2))
         throw new Error("event-stream.read expects an array");
       stream.resume = function() {
         if (ended)
           return;
         paused = false;
-        var l = array.length;
+        var l = array2.length;
         while (i2 < l && !paused && !ended) {
-          stream.emit("data", array[i2++]);
+          stream.emit("data", array2[i2++]);
         }
         if (i2 == l && !ended)
           ended = true, stream.readable = false, stream.emit("end");
@@ -69315,8 +70229,8 @@ var require_utils4 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.string = exports2.stream = exports2.pattern = exports2.path = exports2.fs = exports2.errno = exports2.array = void 0;
-    var array = require_array();
-    exports2.array = array;
+    var array2 = require_array();
+    exports2.array = array2;
     var errno = require_errno();
     exports2.errno = errno;
     var fs9 = require_fs2();
@@ -79966,17 +80880,11 @@ var init_pgPushUtils = __esm({
         }
         const stmnt = fromJson([statement], "postgresql");
         if (typeof stmnt !== "undefined") {
-          if (statement.type === "drop_table") {
-            statementsToExecute.push(
-              `DROP TABLE ${concatSchemaAndTableName(statement.schema, statement.tableName)} CASCADE;`
-            );
-          } else {
-            statementsToExecute.push(...stmnt);
-          }
+          statementsToExecute.push(...stmnt);
         }
       }
       return {
-        statementsToExecute,
+        statementsToExecute: [...new Set(statementsToExecute)],
         shouldAskForApprove,
         infoToPrint,
         matViewsToRemove: [...new Set(matViewsToRemove)],
@@ -81124,7 +82032,7 @@ var init_pgIntrospect = __esm({
     init_global();
     init_pgSerializer();
     init_views();
-    pgPushIntrospect = async (db, filters, schemaFilters) => {
+    pgPushIntrospect = async (db, filters, schemaFilters, entities = { roles: true }) => {
       const matchers = filters.map((it) => {
         return new Minimatch(it);
       });
@@ -81153,7 +82061,7 @@ var init_pgIntrospect = __esm({
       );
       const res = await (0, import_hanji9.renderWithTask)(
         progress,
-        fromDatabase2(db, filter2, schemaFilters)
+        fromDatabase2(db, filter2, schemaFilters, entities)
       );
       const schema5 = { id: originUUID, prevId: "", ...res };
       const { internal, ...schemaWithoutInternals } = schema5;
@@ -81743,11 +82651,11 @@ var init_push = __esm({
         console.log(e2);
       }
     };
-    pgPush = async (schemaPath, verbose, strict, credentials2, tablesFilter, schemasFilter, force, casing2) => {
+    pgPush = async (schemaPath, verbose, strict, credentials2, tablesFilter, schemasFilter, entities, force, casing2) => {
       const { preparePostgresDB: preparePostgresDB2 } = await Promise.resolve().then(() => (init_connections(), connections_exports));
       const { pgPushIntrospect: pgPushIntrospect2 } = await Promise.resolve().then(() => (init_pgIntrospect(), pgIntrospect_exports));
       const db = await preparePostgresDB2(credentials2);
-      const { schema: schema5 } = await pgPushIntrospect2(db, tablesFilter, schemasFilter);
+      const { schema: schema5 } = await pgPushIntrospect2(db, tablesFilter, schemasFilter, entities);
       const { preparePgPush: preparePgPush2 } = await Promise.resolve().then(() => (init_migrate(), migrate_exports));
       const statements = await preparePgPush2(schemaPath, schema5, schemasFilter, casing2);
       try {
@@ -83004,7 +83912,7 @@ function generateIdentityParams(identity) {
   }
   return `.generatedByDefaultAsIdentity(${paramsObj})`;
 }
-var import_drizzle_orm9, import_relations, import_casing5, pgImportsList, timeConfig2, possibleIntervals, intervalStrToObj, intervalConfig, mapColumnDefault3, importsPatch2, relations3, escapeColumnKey3, withCasing2, dbColumnName3, paramNameFor, schemaToTypeScript3, isCyclic3, isSelf3, buildArrayDefault, mapDefault, column6, dimensionsInArray, createTableColumns3, createTableIndexes3, createTablePKs3, createTableUniques3, createTableChecks3, createTableFKs3;
+var import_drizzle_orm9, import_relations, import_casing5, pgImportsList, timeConfig2, possibleIntervals, intervalStrToObj, intervalConfig, mapColumnDefault3, importsPatch2, relations3, escapeColumnKey3, withCasing2, dbColumnName3, paramNameFor, schemaToTypeScript3, isCyclic3, isSelf3, buildArrayDefault, mapDefault, column6, dimensionsInArray, createTableColumns3, createTableIndexes3, createTablePKs3, createTablePolicies, createTableUniques3, createTableChecks3, createTableFKs3;
 var init_introspect_pg = __esm({
   "src/introspect-pg.ts"() {
     "use strict";
@@ -83178,6 +84086,9 @@ var init_introspect_pg = __esm({
           const checkImports = Object.values(it.checkConstraints).map(
             (it2) => "check"
           );
+          const policiesImports = Object.values(it.policies).map(
+            (it2) => "pgPolicy"
+          );
           if (it.schema && it.schema !== "public" && it.schema !== "") {
             res.pg.push("pgSchema");
           }
@@ -83185,6 +84096,7 @@ var init_introspect_pg = __esm({
           res.pg.push(...fkImpots);
           res.pg.push(...pkImports);
           res.pg.push(...uniqueImports);
+          res.pg.push(...policiesImports);
           res.pg.push(...checkImports);
           const columnImports = Object.values(it.columns).map((col) => {
             let patched = (importsPatch2[col.type] || col.type).replace("[]", "");
@@ -83243,6 +84155,9 @@ var init_introspect_pg = __esm({
           imports.pg.push("pgEnum");
         }
       });
+      if (Object.keys(schema5.roles).length > 0) {
+        imports.pg.push("pgRole");
+      }
       const enumStatements = Object.values(schema5.enums).map((it) => {
         const enumSchema3 = schemas[it.schema];
         const paramName = paramNameFor(it.name, enumSchema3);
@@ -83278,9 +84193,16 @@ var init_introspect_pg = __esm({
         }
         return `export const ${withCasing2(paramName, casing2)} = ${func}("${it.name}"${params ? `, { ${params.trimChar(",")} }` : ""})
 `;
-      }).join("").concat("\n");
+      }).join("").concat("");
       const schemaStatements = Object.entries(schemas).map((it) => {
         return `export const ${it[1]} = pgSchema("${it[0]}");
+`;
+      }).join("");
+      const rolesNameToTsKey = {};
+      const rolesStatements = Object.entries(schema5.roles).map((it) => {
+        const fields = it[1];
+        rolesNameToTsKey[fields.name] = it[0];
+        return `export const ${withCasing2(it[0], casing2)} = pgRole("${fields.name}", ${!fields.createDb && !fields.createRole && fields.inherit ? "" : `${`, { ${fields.createDb ? `createDb: true,` : ""}${fields.createRole ? ` createRole: true,` : ""}${!fields.inherit ? ` inherit: false ` : ""}`.trimChar(",")}}`} );
 `;
       }).join("");
       const tableStatements = Object.values(schema5.tables).map((table4) => {
@@ -83299,8 +84221,8 @@ var init_introspect_pg = __esm({
           schema5.internal
         );
         statement += "}";
-        if (Object.keys(table4.indexes).length > 0 || Object.values(table4.foreignKeys).length > 0 || Object.keys(table4.compositePrimaryKeys).length > 0 || Object.keys(table4.uniqueConstraints).length > 0 || Object.keys(table4.checkConstraints).length > 0) {
-          statement += ",\n";
+        if (Object.keys(table4.indexes).length > 0 || Object.values(table4.foreignKeys).length > 0 || Object.values(table4.policies).length > 0 || Object.keys(table4.compositePrimaryKeys).length > 0 || Object.keys(table4.uniqueConstraints).length > 0 || Object.keys(table4.checkConstraints).length > 0) {
+          statement += ", ";
           statement += "(table) => {\n";
           statement += "	return {\n";
           statement += createTableIndexes3(table4.name, Object.values(table4.indexes), casing2);
@@ -83313,6 +84235,11 @@ var init_introspect_pg = __esm({
             Object.values(table4.uniqueConstraints),
             casing2
           );
+          statement += createTablePolicies(
+            Object.values(table4.policies),
+            casing2,
+            rolesNameToTsKey
+          );
           statement += createTableChecks3(
             Object.values(table4.checkConstraints),
             casing2
@@ -83346,11 +84273,14 @@ var init_introspect_pg = __esm({
         return statement;
       }).join("\n\n");
       const uniquePgImports = ["pgTable", ...new Set(imports.pg)];
-      const importsTs = `import { ${uniquePgImports.join(", ")} } from "drizzle-orm/pg-core"
-  import { sql } from "drizzle-orm"
+      const importsTs = `import { ${uniquePgImports.join(
+        ", "
+      )} } from "drizzle-orm/pg-core"
+import { sql } from "drizzle-orm"
 
 `;
       let decalrations = schemaStatements;
+      decalrations += rolesStatements;
       decalrations += enumStatements;
       decalrations += sequencesStatements;
       decalrations += "\n";
@@ -83749,6 +84679,23 @@ var init_introspect_pg = __esm({
         }).join(", ")}]${it.name ? `, name: "${it.name}"` : ""}}`;
         statement += ")";
         statement += `,
+`;
+      });
+      return statement;
+    };
+    createTablePolicies = (policies, casing2, rolesNameToTsKey = {}) => {
+      let statement = "";
+      policies.forEach((it) => {
+        var _a, _b, _c;
+        const idxKey = withCasing2(it.name, casing2);
+        const mappedItTo = (_a = it.to) == null ? void 0 : _a.map((v) => {
+          return rolesNameToTsKey[v] ? withCasing2(rolesNameToTsKey[v], casing2) : `"${v}"`;
+        });
+        statement += `		${idxKey}: `;
+        statement += "pgPolicy(";
+        statement += `"${it.name}", { `;
+        statement += `as: "${(_b = it.as) == null ? void 0 : _b.toLowerCase()}", for: "${(_c = it.for) == null ? void 0 : _c.toLowerCase()}", to: [${mappedItTo == null ? void 0 : mappedItTo.join(", ")}]${it.using ? `, using: sql\`${it.using}\`` : ""}${it.withCheck ? `, withCheck: sql\`${it.withCheck}\` ` : ""}`;
+        statement += ` }),
 `;
       });
       return statement;
@@ -83839,7 +84786,7 @@ var init_introspect = __esm({
     init_utils();
     init_views();
     init_migrate();
-    introspectPostgres = async (casing2, out, breakpoints, credentials2, tablesFilter, schemasFilter, prefix2) => {
+    introspectPostgres = async (casing2, out, breakpoints, credentials2, tablesFilter, schemasFilter, prefix2, entities) => {
       const { preparePostgresDB: preparePostgresDB2 } = await Promise.resolve().then(() => (init_connections(), connections_exports));
       const db = await preparePostgresDB2(credentials2);
       const matchers = tablesFilter.map((it) => {
@@ -83867,9 +84814,15 @@ var init_introspect = __esm({
       const progress = new IntrospectProgress(true);
       const res = await (0, import_hanji12.renderWithTask)(
         progress,
-        fromDatabase2(db, filter2, schemasFilter, (stage, count, status) => {
-          progress.update(stage, count, status);
-        })
+        fromDatabase2(
+          db,
+          filter2,
+          schemasFilter,
+          entities,
+          (stage, count, status) => {
+            progress.update(stage, count, status);
+          }
+        )
       );
       const schema5 = { id: originUUID, prevId: "", ...res };
       const ts = schemaToTypeScript3(schema5, casing2);
@@ -83888,6 +84841,7 @@ var init_introspect = __esm({
           schemasResolver,
           enumsResolver,
           sequencesResolver,
+          policyResolver,
           tablesResolver,
           columnsResolver,
           viewsResolver,
@@ -87414,7 +88368,8 @@ var pull = command({
       breakpoints,
       tablesFilter,
       schemasFilter,
-      prefix: prefix2
+      prefix: prefix2,
+      entities
     } = config;
     (0, import_fs13.mkdirSync)(out, { recursive: true });
     console.log(
@@ -87453,7 +88408,8 @@ var pull = command({
           credentials2,
           tablesFilter,
           schemasFilter,
-          prefix2
+          prefix2,
+          entities
         );
       } else if (dialect4 === "mysql") {
         const { introspectMysql: introspectMysql2 } = await Promise.resolve().then(() => (init_introspect(), introspect_exports));
@@ -87624,7 +88580,7 @@ init_utils2();
 var version2 = async () => {
   const { npmVersion } = await ormCoreVersions();
   const ormVersion = npmVersion ? `drizzle-orm: v${npmVersion}` : "";
-  const envVersion = "0.26.2-a43c673";
+  const envVersion = "0.26.2-b2b714a";
   const kitVersion = envVersion ? `v${envVersion}` : "--";
   const versions = `drizzle-kit: ${kitVersion}
 ${ormVersion}`;