rowstile 0.1.0-alpha.3 → 0.1.0-alpha.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/command/authzlib/__init__.py +4 -1
  2. package/command/authzlib/base.py +46 -7
  3. package/command/authzlib/compiler.py +577 -259
  4. package/command/authzlib/conditions.py +17 -8
  5. package/command/authzlib/connection.py +1 -0
  6. package/command/authzlib/coverage.py +12 -5
  7. package/command/authzlib/database.py +333 -124
  8. package/command/authzlib/devtools.py +15 -8
  9. package/command/authzlib/draft.py +235 -62
  10. package/command/authzlib/errors.py +201 -101
  11. package/command/authzlib/evaluate.py +92 -44
  12. package/command/authzlib/fmt.py +33 -16
  13. package/command/authzlib/governance.py +105 -50
  14. package/command/authzlib/grant.py +100 -52
  15. package/command/authzlib/hardening.py +122 -54
  16. package/command/authzlib/identity.py +22 -15
  17. package/command/authzlib/insight.py +161 -86
  18. package/command/authzlib/migrate.py +193 -102
  19. package/command/authzlib/output.py +376 -196
  20. package/command/authzlib/parse.py +249 -98
  21. package/command/authzlib/perf.py +78 -32
  22. package/command/authzlib/prove.py +23 -11
  23. package/command/authzlib/refusals.py +107 -48
  24. package/command/authzlib/review.py +361 -139
  25. package/command/authzlib/sqlutil.py +196 -33
  26. package/command/authzlib/statements.py +26 -19
  27. package/command/authzlib/testing.py +98 -45
  28. package/command/authzlib/trees.py +427 -275
  29. package/command/cli/init.py +27 -8
  30. package/command/cli/lsp.py +140 -51
  31. package/command/cli/mcp.py +107 -45
  32. package/command/cli/migrations.py +74 -21
  33. package/command/cli/pgwire.py +161 -67
  34. package/command/cli/rowstile_cli.py +351 -105
  35. package/command/cli/stack.py +67 -30
  36. package/command/cli/studio.py +258 -84
  37. package/package.json +8 -8
package/command/authzlib/__init__.py CHANGED
@@ -1,5 +1,6 @@
1
1
  """authzlib: compile a .authz policy file into PostgreSQL (views, closure tables,
2
2
  triggers, row-level security policies and an API for app code)."""
3
+
3
4
  from .devtools import DevMixin
4
5
  from .output import OutputMixin
5
6
  from .parse import Loc, PolicyError, parse_policy
@@ -10,7 +11,8 @@ class Compiler(TestMixin, DevMixin, OutputMixin):
10
11
  """A policy compiled: each part of the output is one of its bases (OutputMixin assembles them)."""
11
12
 
12
13
 
13
- __version__ = "0.1.0-alpha.3" # set with packaging/version.py (the packages copy it); authz.policy_versions records it on each apply
14
+ # set with packaging/version.py (the packages copy it); authz.policy_versions records it on each apply
15
+ __version__ = "0.1.0-alpha.4"
14
16
 
15
17
 
16
18
  def _build() -> str:
@@ -20,6 +22,7 @@ def _build() -> str:
20
22
  return __version__
21
23
  import hashlib
22
24
  import os
25
+
23
26
  here, h = os.path.dirname(os.path.abspath(__file__)), hashlib.sha256()
24
27
  for name in sorted(os.listdir(here)):
25
28
  if name.endswith(".py"):
package/command/authzlib/base.py CHANGED
@@ -177,10 +177,49 @@ CREATE OR REPLACE FUNCTION authz.link_hashes() RETURNS text[] LANGUAGE sql STABL
177
177
  WHERE btrim(x) <> '' $$;"""
178
178
 
179
179
  # Functions each apply recreates (dropped first, whatever their old signature).
180
- GENERATED_FUNCTIONS = ("act_as", "can", "list", "perms", "perms_of", "share", "unshare", "verify", "create_link", "principal",
181
- "create_role", "set_role_permissions", "delete_role", "roles_of", "who", "explain", "list_shares", "shares",
182
- "create_api_key", "list_api_keys", "revoke_api_key", "login_key", "login_jwt", "view_as",
183
- "sync_members", "changes_since", "trim_changes", "trim_audit", "request_access", "pending_requests", "decide_request",
184
- "cancel_request", "break_glass", "start_review", "review_items", "review_decide",
185
- "close_review", "check_invariants", "lint", "connection_check", "explain_rule", "who_among",
186
- "list_links", "revoke_link")
180
+ GENERATED_FUNCTIONS = (
181
+ "act_as",
182
+ "can",
183
+ "list",
184
+ "perms",
185
+ "perms_of",
186
+ "share",
187
+ "unshare",
188
+ "verify",
189
+ "create_link",
190
+ "principal",
191
+ "create_role",
192
+ "set_role_permissions",
193
+ "delete_role",
194
+ "roles_of",
195
+ "who",
196
+ "explain",
197
+ "list_shares",
198
+ "shares",
199
+ "create_api_key",
200
+ "list_api_keys",
201
+ "revoke_api_key",
202
+ "login_key",
203
+ "login_jwt",
204
+ "view_as",
205
+ "sync_members",
206
+ "changes_since",
207
+ "trim_changes",
208
+ "trim_audit",
209
+ "request_access",
210
+ "pending_requests",
211
+ "decide_request",
212
+ "cancel_request",
213
+ "break_glass",
214
+ "start_review",
215
+ "review_items",
216
+ "review_decide",
217
+ "close_review",
218
+ "check_invariants",
219
+ "lint",
220
+ "connection_check",
221
+ "explain_rule",
222
+ "who_among",
223
+ "list_links",
224
+ "revoke_link",
225
+ )