node-type-registry 0.6.0 → 0.6.2

package/blueprint-types.generated.d.ts

@@ -355,7 +355,7 @@ export interface RelationManyToManyParams {
         [key: string]: unknown;
     };
     grant_roles?: string[];
-    grant_privileges?: string[];
+    grant_privileges?: string[][];
     policy_type?: string;
     policy_privileges?: string[];
     policy_role?: string;
@@ -425,7 +425,7 @@ export interface BlueprintField {
 /** An RLS policy entry for a blueprint table. */
 export interface BlueprintPolicy {
     /** Authz* policy type name (e.g., "AuthzDirectOwner", "AuthzAllowAll"). */
-    $type: "AuthzDirectOwner" | "AuthzDirectOwnerAny" | "AuthzMembership" | "AuthzEntityMembership" | "AuthzRelatedEntityMembership" | "AuthzOrgHierarchy" | "AuthzTemporal" | "AuthzPublishable" | "AuthzMemberList" | "AuthzRelatedMemberList" | "AuthzAllowAll" | "AuthzDenyAll" | "AuthzComposite" | "AuthzPeerOwnership" | "AuthzRelatedPeerOwnership";
+    policy_type: "AuthzDirectOwner" | "AuthzDirectOwnerAny" | "AuthzMembership" | "AuthzEntityMembership" | "AuthzRelatedEntityMembership" | "AuthzOrgHierarchy" | "AuthzTemporal" | "AuthzPublishable" | "AuthzMemberList" | "AuthzRelatedMemberList" | "AuthzAllowAll" | "AuthzDenyAll" | "AuthzComposite" | "AuthzPeerOwnership" | "AuthzRelatedPeerOwnership";
     /** Role for this policy. Defaults to "authenticated". */
     policy_role?: string;
     /** Whether this policy is permissive (true) or restrictive (false). */
@@ -459,9 +459,9 @@ export interface BlueprintFullTextSearch {
 export interface BlueprintIndex {
     /** Reference key of the table this index belongs to. */
     table_ref: string;
-    /** Single column name for the index. Mutually exclusive with "columns". */
+    /** Single column name for the index. */
     column?: string;
-    /** Array of column names for a multi-column index. Mutually exclusive with "column". */
+    /** Array of column names for a multi-column index. */
     columns?: string[];
     /** Index access method (e.g., "BTREE", "GIN", "GIST", "HNSW", "BM25"). */
     access_method: string;
@@ -641,7 +641,7 @@ export interface BlueprintTable {
     policies?: BlueprintPolicy[];
     /** Database roles to grant privileges to. Defaults to ["authenticated"]. */
     grant_roles?: string[];
-    /** Privilege grants as [verb, column] tuples or objects. */
+    /** Privilege grants as [verb, column] tuples or objects. Defaults to empty (no grants — callers must explicitly specify). */
     grants?: unknown[];
     /** Whether to enable RLS on this table. Defaults to true. */
     use_rls?: boolean;

package/blueprint-types.generated.js

@@ -33,7 +33,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 ;
 /**
  * ===========================================================================
- * Static structural types
+ * Structural types — Static fallback (no _meta provided)
  * ===========================================================================
  */
 ;

package/codegen/generate-types.js

@@ -362,7 +362,7 @@ function buildBlueprintTable() {
         addJSDoc(optionalProp('fields', t.tsArrayType(t.tsTypeReference(t.identifier('BlueprintField')))), 'Custom fields (columns) to add to the table.'),
         addJSDoc(optionalProp('policies', t.tsArrayType(t.tsTypeReference(t.identifier('BlueprintPolicy')))), 'RLS policies for this table.'),
         addJSDoc(optionalProp('grant_roles', t.tsArrayType(t.tsStringKeyword())), 'Database roles to grant privileges to. Defaults to ["authenticated"].'),
-        addJSDoc(optionalProp('grants', t.tsArrayType(t.tsUnknownKeyword())), 'Privilege grants as [verb, column] tuples or objects.'),
+        addJSDoc(optionalProp('grants', t.tsArrayType(t.tsUnknownKeyword())), 'Privilege grants as [verb, column] tuples or objects. Defaults to empty (no grants — callers must explicitly specify).'),
         addJSDoc(optionalProp('use_rls', t.tsBooleanKeyword()), 'Whether to enable RLS on this table. Defaults to true.'),
     ]), 'A table definition within a blueprint.');
 }

package/esm/blueprint-types.generated.d.ts

@@ -355,7 +355,7 @@ export interface RelationManyToManyParams {
         [key: string]: unknown;
     };
     grant_roles?: string[];
-    grant_privileges?: string[];
+    grant_privileges?: string[][];
     policy_type?: string;
     policy_privileges?: string[];
     policy_role?: string;
@@ -425,7 +425,7 @@ export interface BlueprintField {
 /** An RLS policy entry for a blueprint table. */
 export interface BlueprintPolicy {
     /** Authz* policy type name (e.g., "AuthzDirectOwner", "AuthzAllowAll"). */
-    $type: "AuthzDirectOwner" | "AuthzDirectOwnerAny" | "AuthzMembership" | "AuthzEntityMembership" | "AuthzRelatedEntityMembership" | "AuthzOrgHierarchy" | "AuthzTemporal" | "AuthzPublishable" | "AuthzMemberList" | "AuthzRelatedMemberList" | "AuthzAllowAll" | "AuthzDenyAll" | "AuthzComposite" | "AuthzPeerOwnership" | "AuthzRelatedPeerOwnership";
+    policy_type: "AuthzDirectOwner" | "AuthzDirectOwnerAny" | "AuthzMembership" | "AuthzEntityMembership" | "AuthzRelatedEntityMembership" | "AuthzOrgHierarchy" | "AuthzTemporal" | "AuthzPublishable" | "AuthzMemberList" | "AuthzRelatedMemberList" | "AuthzAllowAll" | "AuthzDenyAll" | "AuthzComposite" | "AuthzPeerOwnership" | "AuthzRelatedPeerOwnership";
     /** Role for this policy. Defaults to "authenticated". */
     policy_role?: string;
     /** Whether this policy is permissive (true) or restrictive (false). */
@@ -459,9 +459,9 @@ export interface BlueprintFullTextSearch {
 export interface BlueprintIndex {
     /** Reference key of the table this index belongs to. */
     table_ref: string;
-    /** Single column name for the index. Mutually exclusive with "columns". */
+    /** Single column name for the index. */
     column?: string;
-    /** Array of column names for a multi-column index. Mutually exclusive with "column". */
+    /** Array of column names for a multi-column index. */
     columns?: string[];
     /** Index access method (e.g., "BTREE", "GIN", "GIST", "HNSW", "BM25"). */
     access_method: string;
@@ -641,7 +641,7 @@ export interface BlueprintTable {
     policies?: BlueprintPolicy[];
     /** Database roles to grant privileges to. Defaults to ["authenticated"]. */
     grant_roles?: string[];
-    /** Privilege grants as [verb, column] tuples or objects. */
+    /** Privilege grants as [verb, column] tuples or objects. Defaults to empty (no grants — callers must explicitly specify). */
     grants?: unknown[];
     /** Whether to enable RLS on this table. Defaults to true. */
     use_rls?: boolean;

package/esm/blueprint-types.generated.js

@@ -31,7 +31,7 @@
 ;
 /**
  * ===========================================================================
- * Static structural types
+ * Structural types — Static fallback (no _meta provided)
  * ===========================================================================
  */
 ;

package/esm/codegen/generate-types.js

@@ -327,7 +327,7 @@ function buildBlueprintTable() {
         addJSDoc(optionalProp('fields', t.tsArrayType(t.tsTypeReference(t.identifier('BlueprintField')))), 'Custom fields (columns) to add to the table.'),
         addJSDoc(optionalProp('policies', t.tsArrayType(t.tsTypeReference(t.identifier('BlueprintPolicy')))), 'RLS policies for this table.'),
         addJSDoc(optionalProp('grant_roles', t.tsArrayType(t.tsStringKeyword())), 'Database roles to grant privileges to. Defaults to ["authenticated"].'),
-        addJSDoc(optionalProp('grants', t.tsArrayType(t.tsUnknownKeyword())), 'Privilege grants as [verb, column] tuples or objects.'),
+        addJSDoc(optionalProp('grants', t.tsArrayType(t.tsUnknownKeyword())), 'Privilege grants as [verb, column] tuples or objects. Defaults to empty (no grants — callers must explicitly specify).'),
         addJSDoc(optionalProp('use_rls', t.tsBooleanKeyword()), 'Whether to enable RLS on this table. Defaults to true.'),
     ]), 'A table definition within a blueprint.');
 }

package/esm/relation/relation-many-to-many.js

@@ -56,7 +56,13 @@ export const RelationManyToMany = {
             },
             "grant_privileges": {
                 "type": "array",
-                "description": "Privilege grants for the junction table. Forwarded to secure_table_provision as-is. Default: select/insert/delete for all columns"
+                "items": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "description": "Privilege grants for the junction table as [verb, columns] tuples (e.g. [['select','*'],['insert','*']]). Forwarded to secure_table_provision as-is. Default: select/insert/delete for all columns"
             },
             "policy_type": {
                 "type": "string",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-type-registry",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "Node type definitions for the Constructive blueprint system. Single source of truth for all Authz*, Data*, Relation*, and View* node types.",
   "author": "Constructive <developers@constructive.io>",
   "main": "index.js",
@@ -48,5 +48,5 @@
     "registry",
     "graphile"
   ],
-  "gitHead": "baae875effd00af36577612c861d0f6f9a1a792a"
+  "gitHead": "98b0d29e8937be61d1afde2c6c1fdab74754b1e4"
 }

package/relation/relation-many-to-many.js

@@ -59,7 +59,13 @@ exports.RelationManyToMany = {
             },
             "grant_privileges": {
                 "type": "array",
-                "description": "Privilege grants for the junction table. Forwarded to secure_table_provision as-is. Default: select/insert/delete for all columns"
+                "items": {
+                    "type": "array",
+                    "items": {
+                        "type": "string"
+                    }
+                },
+                "description": "Privilege grants for the junction table as [verb, columns] tuples (e.g. [['select','*'],['insert','*']]). Forwarded to secure_table_provision as-is. Default: select/insert/delete for all columns"
             },
             "policy_type": {
                 "type": "string",