Skip to content

Commit fb6f205

Browse files
committed
refactor(safegres): drop Authz* re-exports + node-type-registry dep
The pure-Postgres auditor doesn't use Authz* anywhere — its findings (A1–A7, P1, P5) are catalog/AST checks with no Constructive-template knowledge. Re-exporting Authz* values + JSON-Schema configs from a public MIT package would leak the Constructive policy DSL. Consumers that need Authz* (rls-audit in constructive-db) can import directly from node-type-registry. safegres no longer depends on it.
1 parent e9b8fc7 commit fb6f205

3 files changed

Lines changed: 0 additions & 28 deletions

File tree

graphql/safegres/package.json

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,6 @@
4646
"@pgsql/traverse": "^17.2.5",
4747
"@pgsql/types": "^17.6.2",
4848
"inquirerer": "^4.7.0",
49-
"node-type-registry": "workspace:^",
5049
"pg": "^8.16.0",
5150
"pg-env": "^1.9.0",
5251
"pgsql-deparser": "^17.18.2",

graphql/safegres/src/index.ts

Lines changed: 0 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,6 @@
44
* The auditor introspects pg_class / pg_policy / role grants and emits
55
* structured findings (A1–A7, P1, P5). It has no knowledge of any specific
66
* application schema or policy DSL.
7-
*
8-
* For convenience, `node-type-registry`'s Authz* / Data* / Relation* / View*
9-
* type definitions are re-exported here so consumers building auditors on
10-
* top of Constructive's type system only need a single dependency.
117
*/
128

139
export { auditPg } from './commands/pg';
@@ -31,23 +27,3 @@ export {
3127
type PgAstNode,
3228
type PolicyExpression
3329
} from './ast/parse';
34-
35-
export type { JSONSchema, NodeTypeDefinition } from 'node-type-registry';
36-
export {
37-
AuthzAllowAll,
38-
AuthzComposite,
39-
AuthzDenyAll,
40-
AuthzDirectOwner,
41-
AuthzDirectOwnerAny,
42-
AuthzEntityMembership,
43-
AuthzMemberList,
44-
AuthzMembership,
45-
AuthzNotReadOnly,
46-
AuthzOrgHierarchy,
47-
AuthzPeerOwnership,
48-
AuthzPublishable,
49-
AuthzRelatedEntityMembership,
50-
AuthzRelatedMemberList,
51-
AuthzRelatedPeerOwnership,
52-
AuthzTemporal
53-
} from 'node-type-registry';

pnpm-lock.yaml

Lines changed: 0 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)