glasswork 1.0.0 → 1.1.0

package/dist/rls/generator.d.ts

@@ -0,0 +1,17 @@
+import type { GenerateRLSPoliciesOptions } from './types.js';
+/**
+ * Generate PostgreSQL Row Level Security DDL statements for a list of tables.
+ *
+ * @param options - Configuration options for policy generation.
+ * @returns Formatted SQL migration string containing DDL statements.
+ *
+ * @example
+ * ```typescript
+ * const sql = generateRLSPolicies({
+ *   models: ['Poll', 'MemberProfile'],
+ *   tenantField: 'tenantId',
+ * });
+ * ```
+ */
+export declare function generateRLSPolicies(options: GenerateRLSPoliciesOptions): string;
+//# sourceMappingURL=generator.d.ts.map

package/dist/rls/generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.d.ts","sourceRoot":"","sources":["../../src/rls/generator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAY7D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,CA0C/E"}

package/dist/rls/generator.js

@@ -0,0 +1,47 @@
+import { validateSessionVariables } from './configuration.js';
+/**
+ * Escape a PostgreSQL identifier (table name or column name) by wrapping in double quotes.
+ */
+function quoteIdentifier(identifier) {
+    if (!identifier.trim()) {
+        throw new Error('Identifier cannot be empty');
+    }
+    return `"${identifier.replaceAll('"', '""')}"`;
+}
+/**
+ * Generate PostgreSQL Row Level Security DDL statements for a list of tables.
+ *
+ * @param options - Configuration options for policy generation.
+ * @returns Formatted SQL migration string containing DDL statements.
+ *
+ * @example
+ * ```typescript
+ * const sql = generateRLSPolicies({
+ *   models: ['Poll', 'MemberProfile'],
+ *   tenantField: 'tenantId',
+ * });
+ * ```
+ */
+export function generateRLSPolicies(options) {
+    const { models, tenantField = 'tenantId', sessionVariable = 'app.current_tenant_id', bypassVariable, forceRLS = true, } = options;
+    if (!models || models.length === 0) {
+        return '';
+    }
+    const quotedTenantField = quoteIdentifier(tenantField);
+    validateSessionVariables(sessionVariable, bypassVariable);
+    const policyStatements = models.map((model) => {
+        const quotedTable = quoteIdentifier(model);
+        const policyName = quoteIdentifier(`tenant_isolation_${model}`);
+        const condition = bypassVariable
+            ? `current_setting('${bypassVariable}', true) = 'true' OR ${quotedTenantField} = NULLIF(current_setting('${sessionVariable}', true), '')`
+            : `${quotedTenantField} = NULLIF(current_setting('${sessionVariable}', true), '')`;
+        const lines = [`ALTER TABLE ${quotedTable} ENABLE ROW LEVEL SECURITY;`];
+        if (forceRLS) {
+            lines.push(`ALTER TABLE ${quotedTable} FORCE ROW LEVEL SECURITY;`);
+        }
+        lines.push(`DROP POLICY IF EXISTS ${policyName} ON ${quotedTable};`, `CREATE POLICY ${policyName} ON ${quotedTable}`, '  FOR ALL', `  USING (${condition})`, `  WITH CHECK (${condition});`);
+        return lines.join('\n');
+    });
+    return policyStatements.join('\n\n');
+}
+//# sourceMappingURL=generator.js.map

package/dist/rls/generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../../src/rls/generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAG9D;;GAEG;AACH,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACrE,MAAM,EACJ,MAAM,EACN,WAAW,GAAG,UAAU,EACxB,eAAe,GAAG,uBAAuB,EACzC,cAAc,EACd,QAAQ,GAAG,IAAI,GAChB,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,iBAAiB,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,wBAAwB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAE1D,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5C,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,eAAe,CAAC,oBAAoB,KAAK,EAAE,CAAC,CAAC;QAEhE,MAAM,SAAS,GAAG,cAAc;YAC9B,CAAC,CAAC,oBAAoB,cAAc,wBAAwB,iBAAiB,8BAA8B,eAAe,eAAe;YACzI,CAAC,CAAC,GAAG,iBAAiB,8BAA8B,eAAe,eAAe,CAAC;QAErF,MAAM,KAAK,GAAa,CAAC,eAAe,WAAW,6BAA6B,CAAC,CAAC;QAElF,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,eAAe,WAAW,4BAA4B,CAAC,CAAC;QACrE,CAAC;QAED,KAAK,CAAC,IAAI,CACR,yBAAyB,UAAU,OAAO,WAAW,GAAG,EACxD,iBAAiB,UAAU,OAAO,WAAW,EAAE,EAC/C,WAAW,EACX,YAAY,SAAS,GAAG,EACxB,iBAAiB,SAAS,IAAI,CAC/B,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/rls/index.d.ts

@@ -0,0 +1,7 @@
+export { getTenantContext, getTenantId, requireTenantId, runWithBypass, runWithTenant, } from './context.js';
+export { createRLSExtension } from './extension.js';
+export { generateRLSPolicies } from './generator.js';
+export { createRLSMiddleware } from './middleware.js';
+export { withBypass, withTenant } from './testing.js';
+export { type GenerateRLSPoliciesOptions, MissingTenantContextException, RLSConfigurationException, type RLSExtensionOptions, type RLSMiddlewareOptions, type RLSTransactionClient, type RLSTransactionOptions, type TenantContext, type TenantContextExtractor, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/rls/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rls/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACL,KAAK,0BAA0B,EAC/B,6BAA6B,EAC7B,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAClB,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC"}

package/dist/rls/index.js

@@ -0,0 +1,7 @@
+export { getTenantContext, getTenantId, requireTenantId, runWithBypass, runWithTenant, } from './context.js';
+export { createRLSExtension } from './extension.js';
+export { generateRLSPolicies } from './generator.js';
+export { createRLSMiddleware } from './middleware.js';
+export { withBypass, withTenant } from './testing.js';
+export { MissingTenantContextException, RLSConfigurationException, } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/rls/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rls/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAEL,6BAA6B,EAC7B,yBAAyB,GAO1B,MAAM,YAAY,CAAC"}

package/dist/rls/middleware.d.ts

@@ -0,0 +1,17 @@
+import type { MiddlewareHandler } from 'hono';
+import { type RLSMiddlewareOptions } from './types.js';
+/**
+ * Create Hono middleware that resolves the active TenantContext and binds it to AsyncLocalStorage.
+ *
+ * @param options - Configuration options for tenant extraction and unauthenticated behavior.
+ * @returns Hono middleware handler.
+ *
+ * @example
+ * ```typescript
+ * app.use('*', createRLSMiddleware({
+ *   allowUnauthenticated: true,
+ * }));
+ * ```
+ */
+export declare function createRLSMiddleware(options?: RLSMiddlewareOptions): MiddlewareHandler;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/rls/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/rls/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAEvD,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,YAAY,CAAC;AA2BpB;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,oBAAyB,GAAG,iBAAiB,CAezF"}

package/dist/rls/middleware.js

@@ -0,0 +1,51 @@
+import { runWithTenant } from './context.js';
+import { MissingTenantContextException, } from './types.js';
+/**
+ * Default tenant extractor that checks for `tenantId` in `c.get('user')` or `c.get('auth')`.
+ */
+function defaultTenantExtractor(c) {
+    const user = c.get('user');
+    if (user && typeof user.tenantId === 'string' && user.tenantId.length > 0) {
+        return {
+            tenantId: user.tenantId,
+            userId: typeof user.id === 'string' ? user.id : undefined,
+            role: typeof user.role === 'string' ? user.role : undefined,
+        };
+    }
+    const auth = c.get('auth');
+    if (auth && typeof auth.tenantId === 'string' && auth.tenantId.length > 0) {
+        return {
+            tenantId: auth.tenantId,
+            userId: typeof auth.userId === 'string' ? auth.userId : undefined,
+            role: typeof auth.role === 'string' ? auth.role : undefined,
+        };
+    }
+    return undefined;
+}
+/**
+ * Create Hono middleware that resolves the active TenantContext and binds it to AsyncLocalStorage.
+ *
+ * @param options - Configuration options for tenant extraction and unauthenticated behavior.
+ * @returns Hono middleware handler.
+ *
+ * @example
+ * ```typescript
+ * app.use('*', createRLSMiddleware({
+ *   allowUnauthenticated: true,
+ * }));
+ * ```
+ */
+export function createRLSMiddleware(options = {}) {
+    const { extractTenant = defaultTenantExtractor, allowUnauthenticated = true } = options;
+    return async (c, next) => {
+        const context = await Promise.resolve(extractTenant(c));
+        if (!context?.tenantId) {
+            if (allowUnauthenticated) {
+                return runWithTenant(undefined, () => next());
+            }
+            throw new MissingTenantContextException();
+        }
+        return runWithTenant(context, () => next());
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/rls/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/rls/middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EACL,6BAA6B,GAG9B,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,SAAS,sBAAsB,CAAC,CAAU;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAwC,CAAC;IAClE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YACzD,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAwC,CAAC;IAClE,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACjE,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SAC5D,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAAyB,EAAE;IACpE,MAAM,EAAE,aAAa,GAAG,sBAAsB,EAAE,oBAAoB,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAExF,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAExD,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvB,IAAI,oBAAoB,EAAE,CAAC;gBACzB,OAAO,aAAa,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,IAAI,6BAA6B,EAAE,CAAC;QAC5C,CAAC;QAED,OAAO,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC"}

package/dist/rls/testing.d.ts

@@ -0,0 +1,24 @@
+import type { TenantContext } from './types.js';
+/**
+ * Run a test or seed function within a specific tenant context.
+ *
+ * @param tenantId - The tenant identifier.
+ * @param fn - The test function.
+ * @returns The resolved return value of `fn`.
+ *
+ * @example
+ * ```typescript
+ * await withTenant('tenant_cwz', async () => {
+ *   const polls = await pollService.list();
+ *   expect(polls).toHaveLength(1);
+ * });
+ * ```
+ */
+export declare function withTenant<T>(tenantId: string, fn: () => T | PromiseLike<T>, options?: Omit<TenantContext, 'tenantId'>): Promise<T>;
+/**
+ * Run a test with explicit bypass context.
+ *
+ * @param fn - The test function.
+ */
+export declare function withBypass<T>(fn: () => T | PromiseLike<T>): Promise<T>;
+//# sourceMappingURL=testing.d.ts.map

package/dist/rls/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/rls/testing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAC1B,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAC5B,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,GACxC,OAAO,CAAC,CAAC,CAAC,CAQZ;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEtE"}

package/dist/rls/testing.js

@@ -0,0 +1,31 @@
+import { runWithBypass, runWithTenant } from './context.js';
+/**
+ * Run a test or seed function within a specific tenant context.
+ *
+ * @param tenantId - The tenant identifier.
+ * @param fn - The test function.
+ * @returns The resolved return value of `fn`.
+ *
+ * @example
+ * ```typescript
+ * await withTenant('tenant_cwz', async () => {
+ *   const polls = await pollService.list();
+ *   expect(polls).toHaveLength(1);
+ * });
+ * ```
+ */
+export function withTenant(tenantId, fn, options) {
+    return runWithTenant({
+        tenantId,
+        ...options,
+    }, fn);
+}
+/**
+ * Run a test with explicit bypass context.
+ *
+ * @param fn - The test function.
+ */
+export function withBypass(fn) {
+    return runWithBypass(fn);
+}
+//# sourceMappingURL=testing.js.map

package/dist/rls/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../src/rls/testing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU,CACxB,QAAgB,EAChB,EAA4B,EAC5B,OAAyC;IAEzC,OAAO,aAAa,CAClB;QACE,QAAQ;QACR,GAAG,OAAO;KACX,EACD,EAAE,CACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAI,EAA4B;IACxD,OAAO,aAAa,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/rls/types.d.ts

@@ -0,0 +1,51 @@
+import type { Context } from 'hono';
+import { type DomainExceptionOptions, ForbiddenException } from '../http/errors.js';
+/** Trusted server context; bypass is an explicit permission, not a secret. */
+export interface TenantContext {
+    tenantId?: string;
+    userId?: string;
+    role?: string;
+    bypass?: boolean;
+    metadata?: Record<string, unknown>;
+}
+export interface RLSExtensionOptions {
+    /** PostgreSQL tenant setting. Default: app.current_tenant_id. */
+    sessionVariable?: string;
+    /** Optional bypass setting. Only the value 'true' activates matching policies. */
+    bypassVariable?: string;
+    /** Prisma model names that require context. Default: all models. */
+    models?: readonly string[];
+    /** Defaults to 'throw'. With 'ignore', PostgreSQL remains responsible for denying access. */
+    missingContextBehavior?: 'throw' | 'ignore';
+}
+/** Public Prisma transaction options. */
+export interface RLSTransactionOptions {
+    maxWait?: number;
+    timeout?: number;
+    isolationLevel?: 'ReadUncommitted' | 'ReadCommitted' | 'RepeatableRead' | 'Serializable';
+}
+export type RLSTransactionClient<TClient> = Omit<TClient, '$connect' | '$disconnect' | '$on' | '$transaction' | '$extends' | '$withTenant'>;
+export type TenantContextExtractor = (context: Context) => TenantContext | undefined | Promise<TenantContext | undefined>;
+export interface RLSMiddlewareOptions {
+    extractTenant?: TenantContextExtractor;
+    /** Allow public requests without a tenant. Default: true. */
+    allowUnauthenticated?: boolean;
+}
+export interface GenerateRLSPoliciesOptions {
+    /** SQL table names, respecting Prisma @@map. */
+    models: readonly string[];
+    /** SQL column name, respecting Prisma @map. Default: tenantId. */
+    tenantField?: string;
+    sessionVariable?: string;
+    /** Only specify for tables that explicitly allow bypass. */
+    bypassVariable?: string;
+    /** Enforce RLS for the table owner as well. Default: true. */
+    forceRLS?: boolean;
+}
+export declare class MissingTenantContextException extends ForbiddenException {
+    constructor(modelName?: string, options?: DomainExceptionOptions);
+}
+export declare class RLSConfigurationException extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/rls/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/rls/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,KAAK,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEpF,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,6FAA6F;IAC7F,sBAAsB,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC7C;AAED,yCAAyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,GAAG,cAAc,CAAC;CAC1F;AAED,MAAM,MAAM,oBAAoB,CAAC,OAAO,IAAI,IAAI,CAC9C,OAAO,EACP,UAAU,GAAG,aAAa,GAAG,KAAK,GAAG,cAAc,GAAG,UAAU,GAAG,aAAa,CACjF,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,CACnC,OAAO,EAAE,OAAO,KACb,aAAa,GAAG,SAAS,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;AAEpE,MAAM,WAAW,oBAAoB;IACnC,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,0BAA0B;IACzC,gDAAgD;IAChD,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,qBAAa,6BAA8B,SAAQ,kBAAkB;IACnE,YAAY,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,EAQ/D;CACF;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}

package/dist/rls/types.js

@@ -0,0 +1,16 @@
+import { ForbiddenException } from '../http/errors.js';
+export class MissingTenantContextException extends ForbiddenException {
+    constructor(modelName, options) {
+        super(modelName
+            ? `Missing tenant context for tenant-scoped model "${modelName}". Operation rejected by RLS guard.`
+            : 'Missing tenant context. Operation rejected by RLS guard.', options);
+        this.name = 'MissingTenantContextException';
+    }
+}
+export class RLSConfigurationException extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RLSConfigurationException';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/rls/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/rls/types.ts"],"names":[],"mappings":"AACA,OAAO,EAA+B,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAwDpF,MAAM,OAAO,6BAA8B,SAAQ,kBAAkB;IACnE,YAAY,SAAkB,EAAE,OAAgC;QAC9D,KAAK,CACH,SAAS;YACP,CAAC,CAAC,mDAAmD,SAAS,qCAAqC;YACnG,CAAC,CAAC,0DAA0D,EAC9D,OAAO,CACR,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF"}

package/dist/uploads/uploads.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploads.service.d.ts","sourceRoot":"","sources":["../../src/uploads/uploads.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAe5C,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,gCAAgC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,oBAAoB;IACnC,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAaD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,oBAAoB;IAMxC;;;OAGG;IACG,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAgBlF;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsB7D;;;;;;OAMG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,yBAAyB,CAAC;IAgBrC;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASjD;;OAEG;IACH,OAAO,CAAC,YAAY;CAGrB"}
+{"version":3,"file":"uploads.service.d.ts","sourceRoot":"","sources":["../../src/uploads/uploads.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAe5C,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,6CAA6C;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,4BAA4B;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,gCAAgC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,oBAAoB;IACnC,qCAAqC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAaD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IAEvC,YAAY,MAAM,EAAE,oBAAoB,EAIvC;IAED;;;OAGG;IACG,kBAAkB,CAAC,UAAU,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAcjF;IAED;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoB5D;IAED;;;;;;OAMG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,yBAAyB,CAAC,CAcpC;IAED;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhD;IAED;;OAEG;IACH,OAAO,CAAC,YAAY;CAGrB"}

package/dist/uploads/validators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/uploads/validators.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,iBAAiB,GAAI,mBAAmB,SAAS,MAAM,EAAE,EAAE,eAAe,MAAM,6LAwC1F,CAAC;AAEJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB,GAChC,mBAAmB,SAAS,MAAM,EAAE,EACpC,eAAe,MAAM,0IAoBpB,CAAC"}
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../src/uploads/validators.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,iBAAiB,sBAAuB,SAAS,MAAM,EAAE,iBAAiB,MAAM,6LAwC1F,CAAC;AAEJ;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,qBAAqB,sBACb,SAAS,MAAM,EAAE,iBACrB,MAAM,0IAoBpB,CAAC"}

package/dist/utils/serialize-prisma-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"serialize-prisma-types.js","sourceRoot":"","sources":["../../src/utils/serialize-prisma-types.ts"],"names":[],"mappings":"AA+CA;;;GAGG;AACH,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAQ,KAAgC,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oEAAoE;IACpE,MAAM,mBAAmB,GACvB,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,KAAK;QACZ,OAAQ,KAAyB,CAAC,CAAC,KAAK,QAAQ;QAChD,OAAQ,KAAyB,CAAC,CAAC,KAAK,QAAQ;QAChD,KAAK,CAAC,OAAO,CAAE,KAAyB,CAAC,CAAC,CAAC,CAAC;IAE9C,qCAAqC;IACrC,MAAM,qBAAqB,GACzB,aAAa,IAAI,KAAK;QACtB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,WAAW,KAAK,IAAI;QAC1B,MAAM,IAAI,KAAK,CAAC,WAAW;QAC1B,KAAK,CAAC,WAAkC,CAAC,IAAI,KAAK,SAAS,CAAC;IAE/D,iEAAiE;IACjE,OAAO,mBAAmB,IAAI,qBAAqB,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAoB,CAAC,KAAc,EAAE,EAAE;IAC7D,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,kCAAkC;AACtD,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB;IAChD,YAAY,EAAE,CAAC,kBAAkB,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAO,EACP,SAA8B,aAAa,EAC3C,MAAM,GAAG,CAAC,EACV,aAAa,IAAI,OAAO,EAAU;IAElC,2DAA2D;IAC3D,IAAI,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,gCAAgC,uBAAuB,cAAc;YACnE,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,IAA0B,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,oDAAoD;YAClD,gEAAgE,CACnE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,WAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,kDAAkD;QAClD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/B,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,CACrC,CAAC;QACxB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC;QAC3D,OAAO,MAA4B,CAAC;IACtC,CAAC;IAED,0BAA0B;IAC1B,OAAO,IAA0B,CAAC;AACpC,CAAC"}
+{"version":3,"file":"serialize-prisma-types.js","sourceRoot":"","sources":["../../src/utils/serialize-prisma-types.ts"],"names":[],"mappings":"AA+CA;;;GAGG;AACH,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAQ,KAAgC,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC/F,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oEAAoE;IACpE,MAAM,mBAAmB,GACvB,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,KAAK;QACZ,GAAG,IAAI,KAAK;QACZ,OAAQ,KAAyB,CAAC,CAAC,KAAK,QAAQ;QAChD,OAAQ,KAAyB,CAAC,CAAC,KAAK,QAAQ;QAChD,KAAK,CAAC,OAAO,CAAE,KAAyB,CAAC,CAAC,CAAC,CAAC;IAE9C,qCAAqC;IACrC,MAAM,qBAAqB,GACzB,aAAa,IAAI,KAAK;QACtB,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,KAAK,CAAC,WAAW,KAAK,IAAI;QAC1B,MAAM,IAAI,KAAK,CAAC,WAAW;QAC1B,KAAK,CAAC,WAAkC,CAAC,IAAI,KAAK,SAAS,CAAC;IAE/D,iEAAiE;IACjE,OAAO,mBAAmB,IAAI,qBAAqB,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAoB,CAAC,KAAc,EAAE,EAAE;IAC7D,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,kCAAkC;AACtD,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB;IAChD,YAAY,EAAE,CAAC,kBAAkB,CAAC;CACnC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAO,EACP,MAAM,GAAwB,aAAa,EAC3C,MAAM,GAAG,CAAC,EACV,UAAU,GAAG,IAAI,OAAO,EAAU;IAElC,2DAA2D;IAC3D,IAAI,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,gCAAgC,uBAAuB,cAAc;YACnE,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,IAA0B,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,oDAAoD;YAClD,gEAAgE,CACnE,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,WAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,kDAAkD;QAClD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/B,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,CACrC,CAAC;QACxB,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kCAAkC;QAC3D,OAAO,MAA4B,CAAC;IACtC,CAAC;IAED,0BAA0B;IAC1B,OAAO,IAA0B,CAAC;AACpC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "glasswork",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "A transparent, Lambda-optimized web framework for building OpenAPI-compliant REST APIs.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -51,6 +51,16 @@
       "import": "./dist/observability/index.js",
       "default": "./dist/observability/index.js"
     },
+    "./rls": {
+      "types": "./dist/rls/index.d.ts",
+      "import": "./dist/rls/index.js",
+      "default": "./dist/rls/index.js"
+    },
+    "./audit": {
+      "types": "./dist/audit/index.d.ts",
+      "import": "./dist/audit/index.js",
+      "default": "./dist/audit/index.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -88,15 +98,16 @@
   "homepage": "https://github.com/rolandboon/glasswork#readme",
   "scripts": {
     "build": "tsc",
+    "build:scripts": "tsc -p tsconfig.scripts.json",
     "dev": "tsc --watch",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
+    "test": "prisma generate --schema test/rls/fixtures/schema.prisma && vitest run",
+    "test:coverage": "prisma generate --schema test/rls/fixtures/schema.prisma && vitest run --coverage",
     "lint": "biome check . --write",
     "lint:ci": "biome check .",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "prisma generate --schema test/rls/fixtures/schema.prisma && tsc --noEmit && tsc --noEmit -p tsconfig.rls-tests.json && tsc --noEmit -p tsconfig.scripts.json",
     "typecheck:strict": "tsc --noEmit -p tsconfig.strict.json",
-    "smoke:pack": "node scripts/smoke-pack-consumer.mjs",
-    "verify": "pnpm run typecheck && pnpm run lint:ci && pnpm run build && pnpm run test && pnpm run smoke:pack",
+    "smoke:pack": "npm run build:scripts && node .scripts/smoke-pack-consumer.js",
+    "verify": "npm run typecheck && npm run lint:ci && npm run build && npm run test && npm run smoke:pack",
     "prepublishOnly": "npm run verify",
     "docs:dev": "vitepress dev docs",
     "docs:build": "vitepress build docs",
@@ -174,43 +185,45 @@
     }
   },
   "devDependencies": {
-    "@aws-sdk/client-cloudwatch": "^3.1065.0",
-    "@aws-sdk/client-dynamodb": "^3.1065.0",
-    "@aws-sdk/client-s3": "^3.1065.0",
-    "@aws-sdk/client-scheduler": "^3.1064.0",
-    "@aws-sdk/client-sesv2": "^3.1064.0",
-    "@aws-sdk/client-sqs": "^3.1064.0",
-    "@aws-sdk/client-ssm": "^3.1064.0",
-    "@aws-sdk/lib-dynamodb": "^3.1065.0",
-    "@aws-sdk/s3-request-presigner": "^3.1065.0",
-    "@biomejs/biome": "^2.4.16",
-    "@casl/ability": "^7.0.0",
-    "@casl/prisma": "^2.0.1",
+    "@aws-sdk/client-cloudwatch": "^3.1128.0",
+    "@aws-sdk/client-dynamodb": "^3.1128.0",
+    "@aws-sdk/client-s3": "^3.1128.0",
+    "@aws-sdk/client-scheduler": "^3.1128.0",
+    "@aws-sdk/client-sesv2": "^3.1128.0",
+    "@aws-sdk/client-sqs": "^3.1128.0",
+    "@aws-sdk/client-ssm": "^3.1128.0",
+    "@aws-sdk/lib-dynamodb": "^3.1128.0",
+    "@aws-sdk/s3-request-presigner": "^3.1128.0",
+    "@biomejs/biome": "^2.5.12",
+    "@casl/ability": "^7.0.1",
+    "@casl/prisma": "^2.0.2",
     "@hono/swagger-ui": "^0.6.1",
-    "@prisma/client": "^7.8.0",
-    "@types/aws-lambda": "^8.10.162",
-    "@types/node": "^24.13.1",
-    "@vitest/coverage-v8": "^4.1.8",
-    "awilix": "^13.0.3",
+    "@prisma/adapter-pg": "7.10.0",
+    "@prisma/client": "^7.10.0",
+    "@types/aws-lambda": "^8.10.163",
+    "@types/node": "^26.5.0",
+    "@vitest/coverage-v8": "^4.1.11",
+    "awilix": "^13.0.5",
     "dotenv": "^17.4.2",
-    "hono": "^4.12.25",
-    "hono-openapi": "^1.3.0",
-    "mermaid": "^11.15.0",
-    "mjml": "^5.3.0",
-    "typescript": "^5.9.3",
-    "valibot": "^1.4.1",
+    "hono": "^4.13.7",
+    "hono-openapi": "^1.3.2",
+    "mermaid": "^11.17.2",
+    "mjml": "^5.4.0",
+    "prisma": "7.10.0",
+    "typescript": "^7.0.2",
+    "valibot": "^1.4.2",
     "vitepress": "^1.6.4",
-    "vitepress-plugin-llms": "^1.13.1",
+    "vitepress-plugin-llms": "^1.13.5",
     "vitepress-plugin-mermaid": "^2.0.17",
-    "vitest": "^4.1.8",
-    "vue": "^3.5.35"
+    "vitest": "^4.1.11",
+    "vue": "^3.5.42"
   },
   "dependencies": {
-    "@hono/standard-validator": "^0.2.2",
+    "@hono/standard-validator": "^0.2.3",
     "@hono/valibot-validator": "^0.6.1",
     "@valibot/to-json-schema": "^1.7.1",
     "deepmerge": "^4.3.1",
-    "nanoid": "^5.1.11",
+    "nanoid": "^5.1.16",
     "openapi-types": "^12.1.3"
   }
 }