rowstile 0.1.0-alpha.4 → 0.1.0-alpha.5

package/README.md

@@ -1,7 +1,8 @@
 # rowstile
 
-Access rules for Postgres: a policy language that the `rowstile` command compiles into row-level security, and
-ships as migrations for your app's tool (Prisma, Drizzle Kit, Alembic, SQL files).
+Authorization for Postgres apps: access rules in a policy language that the `rowstile` command compiles into
+row-level security, and ships as migrations for your app's tool (Prisma, Drizzle Kit, Alembic, SQL files).
+Sharing, groups, nested folders and tenants, with no service to run beside the database.
 
     npx rowstile init        # a first policy from your tables, rowstile.toml, the SDK for your stack
     npx rowstile dev         # on each save: check, apply to the development database, test, write the types

package/bin/rowstile.js

@@ -64,7 +64,35 @@ function onPath() {
   return null;
 }
 
-const python = process.env.ROWSTILE_PYTHON || process.env.ROWFENCE_PYTHON || bundled() || onPath();   // ROWFENCE_PYTHON: the name before the rename
+/** On Windows, a file of the bundled Python whose path is longer than Windows loads (259 characters, unless long
+ *  paths are turned on): Python then stops with "DLL load failed ... The filename or extension is too long",
+ *  from inside node_modules. Null when every file is within the limit.
+ *  @param {string} exe @returns {string | null} */
+function tooLong(exe) {
+  if (process.platform !== "win32") return null;
+  try {
+    const dlls = path.join(path.dirname(fs.realpathSync.native(exe)), "DLLs");
+    const longest = fs.readdirSync(dlls).map((f) => path.join(dlls, f)).sort((a, b) => b.length - a.length)[0];
+    if (!longest || longest.length <= 259) return null;
+    // with long paths turned on, or when only files the command never loads are past the limit, it runs all
+    // the same: ask it for the compiled modules the command uses
+    const probe = "import unicodedata, ssl, hashlib, socket, select, zlib, decimal";
+    return spawnSync(exe, ["-E", "-s", "-c", probe]).status === 0 ? null : longest;
+  } catch {
+    return null;
+  }
+}
+
+const own = process.env.ROWSTILE_PYTHON || process.env.ROWFENCE_PYTHON ? null : bundled();   // ROWFENCE_PYTHON: the name before the rename
+const long = own && tooLong(own);
+if (long && !onPath()) {
+  console.error(`rowstile: this project's path is too long for Windows to load the Python that came with the package ` +
+    `(${long.length} characters to ${path.basename(long)}; Windows loads up to 259). Move the project to a shorter path, ` +
+    "or turn long paths on in Windows (LongPathsEnabled), or install Python 3.11 or later: rowstile then runs on that one");
+  process.exit(1);
+}
+// a Python on PATH, when the bundled one can't be loaded from here
+const python = process.env.ROWSTILE_PYTHON || process.env.ROWFENCE_PYTHON || (long ? null : own) || onPath();
 if (!python) {
   console.error(`rowstile: no Python to run on. The package for this platform (@rowstile/cli-${key}) isn't installed` +
     (PLATFORMS.includes(key) ? " (optional dependencies turned off?)" : `, and there is none for ${key}`) +

package/command/authzlib/__init__.py

@@ -12,7 +12,7 @@ class Compiler(TestMixin, DevMixin, OutputMixin):
 
 
 # set with packaging/version.py (the packages copy it); authz.policy_versions records it on each apply
-__version__ = "0.1.0-alpha.4"
+__version__ = "0.1.0-alpha.5"
 
 
 def _build() -> str:

package/command/authzlib/perf.py

@@ -115,7 +115,7 @@ def table_indexes(db: Db, table: str) -> list[tuple[str, ...]]:
         "SELECT array(SELECT a.attname::text FROM unnest(i.indkey::int2[]) WITH ORDINALITY k(n, o) "
         "LEFT JOIN pg_catalog.pg_attribute a ON a.attrelid = i.indrelid AND a.attnum = k.n ORDER BY k.o) AS cols "
         "FROM pg_catalog.pg_index i WHERE i.indrelid = to_regclass($1) AND i.indpred IS NULL AND i.indisvalid",
-        [table],
+        [qt(table)],  # quoted: to_regclass folds a bare name to lower case, and "TeamMember" is then not found
     )
     out: list[tuple[str, ...]] = []
     for r in rows:
@@ -354,7 +354,7 @@ def plain_column(db: Db, c: Compiler, t: Type) -> str | None:
     rows = db.rows(
         "SELECT attname::text AS a FROM pg_catalog.pg_attribute WHERE attrelid = to_regclass($1) AND attnum > 0 "
         "AND NOT attisdropped AND attgenerated = '' ORDER BY attnum",
-        [t.table],
+        [qt(t.table)],
     )
     return next((text(r, "a") for r in rows if r["a"] not in used), None)
 

package/package.json

@@ -1,8 +1,29 @@
 {
   "name": "rowstile",
-  "version": "0.1.0-alpha.4",
-  "description": "Access rules for Postgres: the rowstile command (policies compiled to row-level security, shipped as migrations), with its own Python",
+  "version": "0.1.0-alpha.5",
+  "description": "Authorization for Postgres apps: the rowstile command (access rules compiled to row-level security, shipped as migrations), with its own Python",
   "license": "Apache-2.0",
+  "mcpName": "io.github.rowstile/rowstile",
+  "homepage": "https://rowstile.dev",
+  "keywords": [
+    "rowstile",
+    "postgres",
+    "postgresql",
+    "authorization",
+    "row-level-security",
+    "rls",
+    "permissions",
+    "access-control",
+    "rbac",
+    "rebac",
+    "multi-tenant",
+    "policy",
+    "migrations",
+    "cli",
+    "prisma",
+    "drizzle",
+    "alembic"
+  ],
   "repository": {
     "type": "git",
     "url": "git+https://github.com/rowstile/rowstile.git",
@@ -20,12 +41,12 @@
     "node": ">=18"
   },
   "optionalDependencies": {
-    "@rowstile/cli-linux-x64": "0.1.0-alpha.4",
-    "@rowstile/cli-linux-arm64": "0.1.0-alpha.4",
-    "@rowstile/cli-linux-x64-musl": "0.1.0-alpha.4",
-    "@rowstile/cli-linux-arm64-musl": "0.1.0-alpha.4",
-    "@rowstile/cli-darwin-x64": "0.1.0-alpha.4",
-    "@rowstile/cli-darwin-arm64": "0.1.0-alpha.4",
-    "@rowstile/cli-win32-x64": "0.1.0-alpha.4"
+    "@rowstile/cli-linux-x64": "0.1.0-alpha.5",
+    "@rowstile/cli-linux-arm64": "0.1.0-alpha.5",
+    "@rowstile/cli-linux-x64-musl": "0.1.0-alpha.5",
+    "@rowstile/cli-linux-arm64-musl": "0.1.0-alpha.5",
+    "@rowstile/cli-darwin-x64": "0.1.0-alpha.5",
+    "@rowstile/cli-darwin-arm64": "0.1.0-alpha.5",
+    "@rowstile/cli-win32-x64": "0.1.0-alpha.5"
   }
 }