Demesne CLI — compile one .demesne spec into Postgres RLS plus a typed app surface. Wraps the prebuilt Go binary for your platform.

SMTA core PostgreSQL schema — tenant isolation via RLS, tables, and functions

Prisma client extension for row-level security on any database

Boot any ObjectStack app in-process and verify it through the real HTTP stack — auto-derived CRUD round-trip fidelity plus the cross-owner RLS invariant. Catches runtime regressions that static checks miss.

Prismarls is a CLI tool designed to facilitate the integration of PostgreSQL Row-Level Security (RLS) with Prisma Migrations. After creating a migration using `prisma migrate dev --create-only`, running `prismarls` will automatically generate SQL to appen

Fork of pg-mem with extended Postgres conformance (PL/pgSQL, triggers, RLS, correlated subqueries, MERGE, ranges, full-text, partitioning, ...). Tracks oguimbal/pg-mem; pending upstream PR #476.

Rust language support - code completion, Intellisense, refactoring, reformatting, errors, snippets. A client for the Rust Language Server, built by the RLS team.

Drizzle ORM toolkit: database error handling, pagination, factory, migrations, scoped CRUD, scoped config store, RLS scoping, idempotency, and generic scope schema primitives

Drizzle adapter for [@usebetterdev/tenant](https://github.com/usebetter-dev/usebetter). Runs each tenant scope in a transaction with `SET LOCAL app.current_tenant = '<uuid>'` so Postgres RLS applies.

Prisma adapter for [@usebetterdev/tenant](https://github.com/usebetter-dev/usebetter). Runs each tenant scope in an interactive transaction with `SET LOCAL app.current_tenant = '<uuid>'` so Postgres RLS applies.

Scan your AI-built app for the ways vibe-coded apps leak — exposed keys, broken RLS, missing auth — in plain English.

Core library for request-scoped multi-tenancy with Postgres RLS. Provides tenant context (AsyncLocalStorage), resolver strategies, adapter contract, and tenant API. No database driver dependency — use with the Drizzle adapter or a custom adapter.

Postgres node with RLS user_id context for n8n

Express middleware for [@usebetterdev/tenant](https://github.com/usebetter-dev/usebetter). Resolves the tenant from the incoming request and opens a database transaction with `SET LOCAL` so Postgres RLS applies.

A tool to generate postgres row-level-security policies.

Ship-readiness check for your Supabase backend. Point it at your OWN project and it flags every table the public anon key can read or insert into, plus any anon-callable RPC functions — and returns the exact Row Level Security (RLS) SQL to lock each one d

The companion CLI for the SaaS boilerplate: scaffold a new project, check your Supabase connectivity, and generate RLS-safe migrations.

React SDK for embedding Reportr dashboards. Provides <ReportrDashboard>, hooks, filter bar primitives, and server-side RLS token signing.

Headless, vendor-free multi-tenant / multi-modal / role-based foundation: ports, withRoute, tenancy, RBAC, entitlements, plugin SDK, http, validation, fields, the RLS SQL. Bring your own auth/email/payments via adapters.

Production-oriented MCP server toolkit for Supabase OAuth 2.1, RLS, Next.js, and Supabase Edge Functions.