@databricks/appkit 0.72.0 → 0.74.0

package/dist/plugins/database/crud/exposure.js

@@ -3,38 +3,79 @@ import { databaseSetupFailed } from "../../../database/errors.js";
 //#region src/plugins/database/crud/exposure.ts
 /** A table name also becomes a URL path segment, so keep it unambiguous. */
 const ROUTABLE_TABLE = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
+const WRITE_OPERATIONS = [
+	"create",
+	"update",
+	"delete"
+];
 /** Refuse names that cannot address exactly one table over HTTP. */
 function assertRoutable(names) {
-	const lowercased = /* @__PURE__ */ new Set();
+	const lowercased = /* @__PURE__ */ new Map();
 	for (const name of names) {
-		if (!ROUTABLE_TABLE.test(name) || lowercased.has(name.toLowerCase())) throw databaseSetupFailed();
-		lowercased.add(name.toLowerCase());
+		if (!ROUTABLE_TABLE.test(name)) throw databaseSetupFailed(`Table ${JSON.stringify(name)} cannot be exposed through api. Route names must start with a letter, contain only letters, digits, "_", or "-", and be at most 64 characters. Rename the table, exclude it with api.tables, or set api: false.`);
+		const previous = lowercased.get(name.toLowerCase());
+		if (previous !== void 0) throw databaseSetupFailed(`Tables ${JSON.stringify(previous)} and ${JSON.stringify(name)} conflict in api because routes are case-insensitive. Rename a table, select only one with api.tables, or set api: false.`);
+		lowercased.set(name.toLowerCase(), name);
 	}
 }
-/**
-* Resolve the tables whose generated reads are explicitly turned on. The
-* exposure value arrives untyped because a finalized schema widens its table
-* names to `string`, so every name is re-checked against the declared schema.
-*/
-function resolveExposedTables(exposure, declared) {
-	if (exposure === void 0 || exposure === false) return [];
-	if (exposure === true) {
-		assertRoutable(declared);
-		return [...declared];
-	}
-	if (typeof exposure !== "object" || exposure === null) throw databaseSetupFailed();
-	const requested = exposure.tables;
-	if (!Array.isArray(requested)) throw databaseSetupFailed();
+/** Validate a unique list drawn from an allowlist. */
+function requestedNames(value, allowed, path) {
+	if (!Array.isArray(value)) throw databaseSetupFailed(`${path} must be an array of names.`);
 	const names = [];
-	for (const name of requested) {
-		if (typeof name !== "string" || !declared.includes(name)) throw databaseSetupFailed();
-		if (names.includes(name)) throw databaseSetupFailed();
+	for (const name of value) {
+		if (typeof name !== "string") throw databaseSetupFailed(`${path} must contain only string names.`);
+		if (!allowed.includes(name)) throw databaseSetupFailed(`${path} contains unsupported name ${JSON.stringify(name)}. Allowed names: ${allowed.map((entry) => JSON.stringify(entry)).join(", ") || "none"}.`);
+		if (names.includes(name)) throw databaseSetupFailed(`${path} contains duplicate name ${JSON.stringify(name)}. List each name once.`);
 		names.push(name);
 	}
-	assertRoutable(names);
 	return names;
 }
+/** Reject misspelled restrictions instead of silently enabling all routes. */
+function configuration(value, allowedKeys, path) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) throw databaseSetupFailed(`${path} must be true, false, or a configuration object.`);
+	const prototype = Object.getPrototypeOf(value);
+	if (prototype !== Object.prototype && prototype !== null) throw databaseSetupFailed(`${path} must be a plain configuration object.`);
+	for (const key of Object.keys(value)) if (!allowedKeys.includes(key)) throw databaseSetupFailed(`Unknown option ${JSON.stringify(`${path}.${key}`)}. Allowed options: ${allowedKeys.join(", ")}.`);
+	return value;
+}
+/** Enable CRUD by default, applying only the restrictions the caller supplies. */
+function resolveCrudExposure(exposure, declared) {
+	if (exposure === false) return {
+		tables: [],
+		writes: /* @__PURE__ */ new Map()
+	};
+	let tables;
+	let writeConfig;
+	if (exposure === void 0 || exposure === true) tables = [...declared];
+	else {
+		const configured = configuration(exposure, ["tables", "writes"], "api");
+		tables = configured.tables === void 0 ? [...declared] : requestedNames(configured.tables, declared, "api.tables");
+		writeConfig = configured.writes;
+	}
+	assertRoutable(tables);
+	const writes = /* @__PURE__ */ new Map();
+	if (writeConfig === false) return {
+		tables,
+		writes
+	};
+	let writeTables;
+	let operations;
+	if (writeConfig === void 0 || writeConfig === true) {
+		writeTables = tables;
+		operations = [...WRITE_OPERATIONS];
+	} else {
+		const configured = configuration(writeConfig, ["tables", "operations"], "api.writes");
+		writeTables = configured.tables === void 0 ? tables : requestedNames(configured.tables, tables, "api.writes.tables");
+		operations = configured.operations === void 0 ? [...WRITE_OPERATIONS] : requestedNames(configured.operations, WRITE_OPERATIONS, "api.writes.operations");
+	}
+	const enabled = new Set(operations);
+	for (const table of writeTables) writes.set(table, enabled);
+	return {
+		tables,
+		writes
+	};
+}
 
 //#endregion
-export { resolveExposedTables };
+export { resolveCrudExposure };
 //# sourceMappingURL=exposure.js.map

package/dist/plugins/database/crud/exposure.js.map

@@ -1 +1 @@
-{"version":3,"file":"exposure.js","names":[],"sources":["../../../../src/plugins/database/crud/exposure.ts"],"sourcesContent":["import { databaseSetupFailed } from \"../../../database/errors\";\n\n/** A table name also becomes a URL path segment, so keep it unambiguous. */\nconst ROUTABLE_TABLE = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;\n\n/** Refuse names that cannot address exactly one table over HTTP. */\nfunction assertRoutable(names: readonly string[]): void {\n  const lowercased = new Set<string>();\n  for (const name of names) {\n    // Express matches paths case-insensitively, so near-duplicates would alias.\n    if (!ROUTABLE_TABLE.test(name) || lowercased.has(name.toLowerCase())) {\n      throw databaseSetupFailed();\n    }\n    lowercased.add(name.toLowerCase());\n  }\n}\n\n/**\n * Resolve the tables whose generated reads are explicitly turned on. The\n * exposure value arrives untyped because a finalized schema widens its table\n * names to `string`, so every name is re-checked against the declared schema.\n */\nexport function resolveExposedTables(\n  exposure: unknown,\n  declared: readonly string[],\n): string[] {\n  if (exposure === undefined || exposure === false) return [];\n  if (exposure === true) {\n    assertRoutable(declared);\n    return [...declared];\n  }\n  if (typeof exposure !== \"object\" || exposure === null) {\n    throw databaseSetupFailed();\n  }\n  const requested = (exposure as { tables?: unknown }).tables;\n  if (!Array.isArray(requested)) throw databaseSetupFailed();\n\n  const names: string[] = [];\n  for (const name of requested) {\n    // Unknown and duplicate names are configuration bugs, not empty routes.\n    if (typeof name !== \"string\" || !declared.includes(name)) {\n      throw databaseSetupFailed();\n    }\n    if (names.includes(name)) throw databaseSetupFailed();\n    names.push(name);\n  }\n  assertRoutable(names);\n  return names;\n}\n"],"mappings":";;;;AAGA,MAAM,iBAAiB;;AAGvB,SAAS,eAAe,OAAgC;CACtD,MAAM,6BAAa,IAAI,KAAa;AACpC,MAAK,MAAM,QAAQ,OAAO;AAExB,MAAI,CAAC,eAAe,KAAK,KAAK,IAAI,WAAW,IAAI,KAAK,aAAa,CAAC,CAClE,OAAM,qBAAqB;AAE7B,aAAW,IAAI,KAAK,aAAa,CAAC;;;;;;;;AAStC,SAAgB,qBACd,UACA,UACU;AACV,KAAI,aAAa,UAAa,aAAa,MAAO,QAAO,EAAE;AAC3D,KAAI,aAAa,MAAM;AACrB,iBAAe,SAAS;AACxB,SAAO,CAAC,GAAG,SAAS;;AAEtB,KAAI,OAAO,aAAa,YAAY,aAAa,KAC/C,OAAM,qBAAqB;CAE7B,MAAM,YAAa,SAAkC;AACrD,KAAI,CAAC,MAAM,QAAQ,UAAU,CAAE,OAAM,qBAAqB;CAE1D,MAAM,QAAkB,EAAE;AAC1B,MAAK,MAAM,QAAQ,WAAW;AAE5B,MAAI,OAAO,SAAS,YAAY,CAAC,SAAS,SAAS,KAAK,CACtD,OAAM,qBAAqB;AAE7B,MAAI,MAAM,SAAS,KAAK,CAAE,OAAM,qBAAqB;AACrD,QAAM,KAAK,KAAK;;AAElB,gBAAe,MAAM;AACrB,QAAO"}
+{"version":3,"file":"exposure.js","names":[],"sources":["../../../../src/plugins/database/crud/exposure.ts"],"sourcesContent":["import { databaseSetupFailed } from \"../../../database/errors\";\nimport type { DatabaseApiWriteOperation } from \"../types\";\n\n/** A table name also becomes a URL path segment, so keep it unambiguous. */\nconst ROUTABLE_TABLE = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;\nconst WRITE_OPERATIONS: readonly DatabaseApiWriteOperation[] = [\n  \"create\",\n  \"update\",\n  \"delete\",\n];\n\n/** Resolved generated routes for one plugin instance. */\nexport interface CrudExposure {\n  readonly tables: readonly string[];\n  readonly writes: ReadonlyMap<string, ReadonlySet<DatabaseApiWriteOperation>>;\n}\n\n/** Refuse names that cannot address exactly one table over HTTP. */\nfunction assertRoutable(names: readonly string[]): void {\n  const lowercased = new Map<string, string>();\n  for (const name of names) {\n    if (!ROUTABLE_TABLE.test(name)) {\n      throw databaseSetupFailed(\n        `Table ${JSON.stringify(name)} cannot be exposed through api. Route names must start with a letter, contain only letters, digits, \"_\", or \"-\", and be at most 64 characters. Rename the table, exclude it with api.tables, or set api: false.`,\n      );\n    }\n    // Express matches paths case-insensitively, so near-duplicates would alias.\n    const previous = lowercased.get(name.toLowerCase());\n    if (previous !== undefined) {\n      throw databaseSetupFailed(\n        `Tables ${JSON.stringify(previous)} and ${JSON.stringify(name)} conflict in api because routes are case-insensitive. Rename a table, select only one with api.tables, or set api: false.`,\n      );\n    }\n    lowercased.set(name.toLowerCase(), name);\n  }\n}\n\n/** Validate a unique list drawn from an allowlist. */\nfunction requestedNames(\n  value: unknown,\n  allowed: readonly string[],\n  path: string,\n): string[] {\n  if (!Array.isArray(value)) {\n    throw databaseSetupFailed(`${path} must be an array of names.`);\n  }\n  const names: string[] = [];\n  for (const name of value) {\n    if (typeof name !== \"string\") {\n      throw databaseSetupFailed(`${path} must contain only string names.`);\n    }\n    if (!allowed.includes(name)) {\n      throw databaseSetupFailed(\n        `${path} contains unsupported name ${JSON.stringify(name)}. Allowed names: ${allowed.map((entry) => JSON.stringify(entry)).join(\", \") || \"none\"}.`,\n      );\n    }\n    if (names.includes(name)) {\n      throw databaseSetupFailed(\n        `${path} contains duplicate name ${JSON.stringify(name)}. List each name once.`,\n      );\n    }\n    names.push(name);\n  }\n  return names;\n}\n\n/** Reject misspelled restrictions instead of silently enabling all routes. */\nfunction configuration(\n  value: unknown,\n  allowedKeys: readonly string[],\n  path: string,\n): Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    throw databaseSetupFailed(\n      `${path} must be true, false, or a configuration object.`,\n    );\n  }\n  const prototype = Object.getPrototypeOf(value);\n  if (prototype !== Object.prototype && prototype !== null) {\n    throw databaseSetupFailed(`${path} must be a plain configuration object.`);\n  }\n  for (const key of Object.keys(value)) {\n    if (!allowedKeys.includes(key)) {\n      throw databaseSetupFailed(\n        `Unknown option ${JSON.stringify(`${path}.${key}`)}. Allowed options: ${allowedKeys.join(\", \")}.`,\n      );\n    }\n  }\n  return value as Record<string, unknown>;\n}\n\n/** Enable CRUD by default, applying only the restrictions the caller supplies. */\nexport function resolveCrudExposure(\n  exposure: unknown,\n  declared: readonly string[],\n): CrudExposure {\n  if (exposure === false) {\n    return { tables: [], writes: new Map() };\n  }\n\n  let tables: string[];\n  let writeConfig: unknown;\n  if (exposure === undefined || exposure === true) {\n    tables = [...declared];\n  } else {\n    const configured = configuration(exposure, [\"tables\", \"writes\"], \"api\");\n    tables =\n      configured.tables === undefined\n        ? [...declared]\n        : requestedNames(configured.tables, declared, \"api.tables\");\n    writeConfig = configured.writes;\n  }\n  assertRoutable(tables);\n\n  const writes = new Map<string, ReadonlySet<DatabaseApiWriteOperation>>();\n  if (writeConfig === false) return { tables, writes };\n\n  let writeTables: string[];\n  let operations: DatabaseApiWriteOperation[];\n  if (writeConfig === undefined || writeConfig === true) {\n    writeTables = tables;\n    operations = [...WRITE_OPERATIONS];\n  } else {\n    const configured = configuration(\n      writeConfig,\n      [\"tables\", \"operations\"],\n      \"api.writes\",\n    );\n    writeTables =\n      configured.tables === undefined\n        ? tables\n        : requestedNames(configured.tables, tables, \"api.writes.tables\");\n    operations =\n      configured.operations === undefined\n        ? [...WRITE_OPERATIONS]\n        : (requestedNames(\n            configured.operations,\n            WRITE_OPERATIONS,\n            \"api.writes.operations\",\n          ) as DatabaseApiWriteOperation[]);\n  }\n\n  const enabled = new Set(operations);\n  for (const table of writeTables) writes.set(table, enabled);\n  return { tables, writes };\n}\n"],"mappings":";;;;AAIA,MAAM,iBAAiB;AACvB,MAAM,mBAAyD;CAC7D;CACA;CACA;CACD;;AASD,SAAS,eAAe,OAAgC;CACtD,MAAM,6BAAa,IAAI,KAAqB;AAC5C,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,CAAC,eAAe,KAAK,KAAK,CAC5B,OAAM,oBACJ,SAAS,KAAK,UAAU,KAAK,CAAC,iNAC/B;EAGH,MAAM,WAAW,WAAW,IAAI,KAAK,aAAa,CAAC;AACnD,MAAI,aAAa,OACf,OAAM,oBACJ,UAAU,KAAK,UAAU,SAAS,CAAC,OAAO,KAAK,UAAU,KAAK,CAAC,2HAChE;AAEH,aAAW,IAAI,KAAK,aAAa,EAAE,KAAK;;;;AAK5C,SAAS,eACP,OACA,SACA,MACU;AACV,KAAI,CAAC,MAAM,QAAQ,MAAM,CACvB,OAAM,oBAAoB,GAAG,KAAK,6BAA6B;CAEjE,MAAM,QAAkB,EAAE;AAC1B,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,OAAO,SAAS,SAClB,OAAM,oBAAoB,GAAG,KAAK,kCAAkC;AAEtE,MAAI,CAAC,QAAQ,SAAS,KAAK,CACzB,OAAM,oBACJ,GAAG,KAAK,6BAA6B,KAAK,UAAU,KAAK,CAAC,mBAAmB,QAAQ,KAAK,UAAU,KAAK,UAAU,MAAM,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,GACjJ;AAEH,MAAI,MAAM,SAAS,KAAK,CACtB,OAAM,oBACJ,GAAG,KAAK,2BAA2B,KAAK,UAAU,KAAK,CAAC,wBACzD;AAEH,QAAM,KAAK,KAAK;;AAElB,QAAO;;;AAIT,SAAS,cACP,OACA,aACA,MACyB;AACzB,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,MAAM,CACrE,OAAM,oBACJ,GAAG,KAAK,kDACT;CAEH,MAAM,YAAY,OAAO,eAAe,MAAM;AAC9C,KAAI,cAAc,OAAO,aAAa,cAAc,KAClD,OAAM,oBAAoB,GAAG,KAAK,wCAAwC;AAE5E,MAAK,MAAM,OAAO,OAAO,KAAK,MAAM,CAClC,KAAI,CAAC,YAAY,SAAS,IAAI,CAC5B,OAAM,oBACJ,kBAAkB,KAAK,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC,qBAAqB,YAAY,KAAK,KAAK,CAAC,GAChG;AAGL,QAAO;;;AAIT,SAAgB,oBACd,UACA,UACc;AACd,KAAI,aAAa,MACf,QAAO;EAAE,QAAQ,EAAE;EAAE,wBAAQ,IAAI,KAAK;EAAE;CAG1C,IAAI;CACJ,IAAI;AACJ,KAAI,aAAa,UAAa,aAAa,KACzC,UAAS,CAAC,GAAG,SAAS;MACjB;EACL,MAAM,aAAa,cAAc,UAAU,CAAC,UAAU,SAAS,EAAE,MAAM;AACvE,WACE,WAAW,WAAW,SAClB,CAAC,GAAG,SAAS,GACb,eAAe,WAAW,QAAQ,UAAU,aAAa;AAC/D,gBAAc,WAAW;;AAE3B,gBAAe,OAAO;CAEtB,MAAM,yBAAS,IAAI,KAAqD;AACxE,KAAI,gBAAgB,MAAO,QAAO;EAAE;EAAQ;EAAQ;CAEpD,IAAI;CACJ,IAAI;AACJ,KAAI,gBAAgB,UAAa,gBAAgB,MAAM;AACrD,gBAAc;AACd,eAAa,CAAC,GAAG,iBAAiB;QAC7B;EACL,MAAM,aAAa,cACjB,aACA,CAAC,UAAU,aAAa,EACxB,aACD;AACD,gBACE,WAAW,WAAW,SAClB,SACA,eAAe,WAAW,QAAQ,QAAQ,oBAAoB;AACpE,eACE,WAAW,eAAe,SACtB,CAAC,GAAG,iBAAiB,GACpB,eACC,WAAW,YACX,kBACA,wBACD;;CAGT,MAAM,UAAU,IAAI,IAAI,WAAW;AACnC,MAAK,MAAM,SAAS,YAAa,QAAO,IAAI,OAAO,QAAQ;AAC3D,QAAO;EAAE;EAAQ;EAAQ"}

package/dist/plugins/database/crud/request.js

@@ -0,0 +1,50 @@
+import { DatabasePluginError, invalidDatabaseInput } from "../../../database/errors.js";
+import { boundedJson, isPlainObject } from "./contract.js";
+
+//#region src/plugins/database/crud/request.ts
+/**
+* Decode a path identifier against the declared key type. A keyless table gets
+* no `/:id` route, so arriving here without a key is a wiring fault, not input.
+*/
+function decodeId(table, raw) {
+	const { primaryKey } = table;
+	if (!primaryKey) throw new DatabasePluginError("INTERNAL", "read");
+	const value = primaryKey.decode(raw);
+	if (typeof value !== "string" && typeof value !== "number" && typeof value !== "bigint") throw invalidDatabaseInput(["id"], "Not a valid identifier");
+	return value;
+}
+/** Map one body value onto its column; `undefined` when it does not fit. */
+function decodeWriteValue(column, raw) {
+	if (raw === null) return column.meta.notNull ? void 0 : null;
+	if (column.meta.kind !== "json") return column.decode(raw);
+	try {
+		return boundedJson(raw);
+	} catch {
+		return;
+	}
+}
+/** Decode one untrusted body against the columns this operation may set. */
+function decodeBody(table, writable, raw) {
+	if (!isPlainObject(raw)) throw invalidDatabaseInput(["body"], "Expected a JSON object");
+	const values = {};
+	for (const [key, value] of Object.entries(raw)) {
+		const column = writable.has(key) ? table.columns.get(key) : void 0;
+		if (!column) throw invalidDatabaseInput(table.selectable.has(key) ? [key] : ["body"], "Unknown or read-only field");
+		const decoded = decodeWriteValue(column, value);
+		if (decoded === void 0) throw invalidDatabaseInput([key], "Does not match the column type");
+		values[key] = decoded;
+	}
+	return values;
+}
+/** Decode the body of `POST /:table`, which may carry a caller-chosen key. */
+function decodeCreateBody(table, raw) {
+	return decodeBody(table, table.creatable, raw);
+}
+/** Decode the body of `PATCH /:table/:id`, which may not carry a key or stamp. */
+function decodeUpdateBody(table, raw) {
+	return decodeBody(table, table.updatable, raw);
+}
+
+//#endregion
+export { decodeCreateBody, decodeId, decodeUpdateBody };
+//# sourceMappingURL=request.js.map

package/dist/plugins/database/crud/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","names":[],"sources":["../../../../src/plugins/database/crud/request.ts"],"sourcesContent":["import {\n  DatabasePluginError,\n  invalidDatabaseInput,\n} from \"../../../database/errors\";\nimport type { IdValue, Row, ScalarValue } from \"../../../database/runtime\";\nimport type { CompiledColumn, JsonValue } from \"./codecs\";\nimport { boundedJson, type CrudTable, isPlainObject } from \"./contract\";\n\n/**\n * Decode a path identifier against the declared key type. A keyless table gets\n * no `/:id` route, so arriving here without a key is a wiring fault, not input.\n */\nexport function decodeId(table: CrudTable, raw: string): IdValue {\n  const { primaryKey } = table;\n  if (!primaryKey) throw new DatabasePluginError(\"INTERNAL\", \"read\");\n  const value = primaryKey.decode(raw);\n  if (\n    typeof value !== \"string\" &&\n    typeof value !== \"number\" &&\n    typeof value !== \"bigint\"\n  ) {\n    throw invalidDatabaseInput([\"id\"], \"Not a valid identifier\");\n  }\n  return value;\n}\n\n/** Map one body value onto its column; `undefined` when it does not fit. */\nfunction decodeWriteValue(\n  column: CompiledColumn,\n  raw: unknown,\n): ScalarValue | JsonValue | undefined {\n  if (raw === null) return column.meta.notNull ? undefined : null;\n  if (column.meta.kind !== \"json\") return column.decode(raw);\n  try {\n    // JSON columns accept any JSON the response budget can carry back.\n    return boundedJson(raw);\n  } catch {\n    return undefined;\n  }\n}\n\n/** Decode one untrusted body against the columns this operation may set. */\nfunction decodeBody(\n  table: CrudTable,\n  writable: ReadonlySet<string>,\n  raw: unknown,\n): Row {\n  if (!isPlainObject(raw)) {\n    throw invalidDatabaseInput([\"body\"], \"Expected a JSON object\");\n  }\n  const values: Row = {};\n  for (const [key, value] of Object.entries(raw)) {\n    // Private, server-generated, and unknown fields are refused, not dropped.\n    const column = writable.has(key) ? table.columns.get(key) : undefined;\n    if (!column) {\n      // Naming the field echoes caller input, so only a public name is named.\n      throw invalidDatabaseInput(\n        table.selectable.has(key) ? [key] : [\"body\"],\n        \"Unknown or read-only field\",\n      );\n    }\n    const decoded = decodeWriteValue(column, value);\n    if (decoded === undefined) {\n      throw invalidDatabaseInput([key], \"Does not match the column type\");\n    }\n    values[key] = decoded;\n  }\n  return values;\n}\n\n/** Decode the body of `POST /:table`, which may carry a caller-chosen key. */\nexport function decodeCreateBody(table: CrudTable, raw: unknown): Row {\n  return decodeBody(table, table.creatable, raw);\n}\n\n/** Decode the body of `PATCH /:table/:id`, which may not carry a key or stamp. */\nexport function decodeUpdateBody(table: CrudTable, raw: unknown): Row {\n  return decodeBody(table, table.updatable, raw);\n}\n"],"mappings":";;;;;;;;AAYA,SAAgB,SAAS,OAAkB,KAAsB;CAC/D,MAAM,EAAE,eAAe;AACvB,KAAI,CAAC,WAAY,OAAM,IAAI,oBAAoB,YAAY,OAAO;CAClE,MAAM,QAAQ,WAAW,OAAO,IAAI;AACpC,KACE,OAAO,UAAU,YACjB,OAAO,UAAU,YACjB,OAAO,UAAU,SAEjB,OAAM,qBAAqB,CAAC,KAAK,EAAE,yBAAyB;AAE9D,QAAO;;;AAIT,SAAS,iBACP,QACA,KACqC;AACrC,KAAI,QAAQ,KAAM,QAAO,OAAO,KAAK,UAAU,SAAY;AAC3D,KAAI,OAAO,KAAK,SAAS,OAAQ,QAAO,OAAO,OAAO,IAAI;AAC1D,KAAI;AAEF,SAAO,YAAY,IAAI;SACjB;AACN;;;;AAKJ,SAAS,WACP,OACA,UACA,KACK;AACL,KAAI,CAAC,cAAc,IAAI,CACrB,OAAM,qBAAqB,CAAC,OAAO,EAAE,yBAAyB;CAEhE,MAAM,SAAc,EAAE;AACtB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,EAAE;EAE9C,MAAM,SAAS,SAAS,IAAI,IAAI,GAAG,MAAM,QAAQ,IAAI,IAAI,GAAG;AAC5D,MAAI,CAAC,OAEH,OAAM,qBACJ,MAAM,WAAW,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,EAC5C,6BACD;EAEH,MAAM,UAAU,iBAAiB,QAAQ,MAAM;AAC/C,MAAI,YAAY,OACd,OAAM,qBAAqB,CAAC,IAAI,EAAE,iCAAiC;AAErE,SAAO,OAAO;;AAEhB,QAAO;;;AAIT,SAAgB,iBAAiB,OAAkB,KAAmB;AACpE,QAAO,WAAW,OAAO,MAAM,WAAW,IAAI;;;AAIhD,SAAgB,iBAAiB,OAAkB,KAAmB;AACpE,QAAO,WAAW,OAAO,MAAM,WAAW,IAAI"}

package/dist/plugins/database/crud/response.js

@@ -0,0 +1,77 @@
+import { DatabaseValidationError } from "../../../errors/database-validation.js";
+import "../../../errors/index.js";
+import { DatabasePluginError, classifyDatabaseError } from "../../../database/errors.js";
+import { MAX_RESPONSE_BYTES } from "../defaults.js";
+
+//#region src/plugins/database/crud/response.ts
+/** Low-cardinality span outcome for one failed generated route. */
+function routeOutcome(error) {
+	const statusCode = error instanceof DatabaseValidationError ? error.statusCode : classifyDatabaseError(error, "read").statusCode;
+	if (statusCode === 404) return "not_found";
+	return statusCode < 500 ? "rejected" : "failed";
+}
+/**
+* Row data is never cacheable by a shared proxy or a browser: the same URL can
+* answer differently once the underlying table or the caller's rights change.
+*/
+function writeJson(res, status, payload) {
+	res.status(status);
+	res.type("application/json");
+	res.setHeader("Cache-Control", "no-store");
+	res.send(payload);
+}
+/** Measure the encoded body before sending so no partial response escapes. */
+function sendJson(res, status, body) {
+	const payload = JSON.stringify(body);
+	if (Buffer.byteLength(payload, "utf8") > MAX_RESPONSE_BYTES) throw new DatabasePluginError("PAYLOAD_TOO_LARGE", "read");
+	writeJson(res, status, payload);
+}
+/**
+* Encode the list envelope one row at a time, charging each encoded row
+* against the byte budget before the next row is shaped, so one response
+* never costs more than the budget in memory.
+*/
+function sendListPage(res, rows, encodeRow, limit, offset) {
+	const prefix = "{\"items\":[";
+	const suffix = `],"limit":${limit},"offset":${offset}}`;
+	let bytes = Buffer.byteLength(prefix, "utf8") + Buffer.byteLength(suffix, "utf8");
+	const items = [];
+	for (const row of rows) {
+		const encoded = JSON.stringify(encodeRow(row));
+		bytes += Buffer.byteLength(encoded, "utf8") + (items.length > 0 ? 1 : 0);
+		if (bytes > MAX_RESPONSE_BYTES) throw new DatabasePluginError("PAYLOAD_TOO_LARGE", "read");
+		items.push(encoded);
+	}
+	writeJson(res, 200, prefix + items.join(",") + suffix);
+}
+/** A `204` carries no body but owes the same cache promise as one that does. */
+function sendEmpty(res, status) {
+	res.status(status);
+	res.setHeader("Cache-Control", "no-store");
+	res.send();
+}
+/**
+* Convert a failure into its safe category. A hook's deliberate validation
+* error is the one signal that reaches the caller, and only through the issues
+* naming a public column of this table.
+*/
+function safeError(table, phase, error) {
+	if (!(error instanceof DatabaseValidationError)) return classifyDatabaseError(error, phase);
+	return new DatabasePluginError("VALIDATION_FAILED", phase, void 0, error.issues.filter((issue) => issue.path.length > 0 && table.selectable.has(issue.path[0])).map((issue) => ({
+		path: [...issue.path],
+		message: issue.message
+	})));
+}
+/** Answer with the failure's safe category and the field it concerns. */
+function sendError(res, table, phase, error) {
+	if (res.headersSent) return;
+	const safe = safeError(table, phase, error);
+	const body = { error: safe.clientMessage };
+	if (safe.details && safe.details.length > 0) body.details = safe.details;
+	const payload = JSON.stringify(body);
+	writeJson(res, safe.statusCode, Buffer.byteLength(payload, "utf8") > MAX_RESPONSE_BYTES ? JSON.stringify({ error: safe.clientMessage }) : payload);
+}
+
+//#endregion
+export { routeOutcome, sendEmpty, sendError, sendJson, sendListPage };
+//# sourceMappingURL=response.js.map

package/dist/plugins/database/crud/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","names":[],"sources":["../../../../src/plugins/database/crud/response.ts"],"sourcesContent":["import type { Response } from \"express\";\n\nimport {\n  classifyDatabaseError,\n  type DatabaseErrorDetail,\n  DatabasePluginError,\n} from \"../../../database/errors\";\nimport type { Row } from \"../../../database/runtime\";\nimport { DatabaseValidationError } from \"../../../errors\";\nimport { MAX_RESPONSE_BYTES } from \"../defaults\";\nimport type { JsonValue } from \"./codecs\";\nimport type { CrudTable } from \"./contract\";\n\n/** Low-cardinality span outcome for one failed generated route. */\nexport function routeOutcome(\n  error: unknown,\n): \"not_found\" | \"rejected\" | \"failed\" {\n  const statusCode =\n    error instanceof DatabaseValidationError\n      ? error.statusCode\n      : classifyDatabaseError(error, \"read\").statusCode;\n  if (statusCode === 404) return \"not_found\";\n  return statusCode < 500 ? \"rejected\" : \"failed\";\n}\n\n/**\n * Row data is never cacheable by a shared proxy or a browser: the same URL can\n * answer differently once the underlying table or the caller's rights change.\n */\nfunction writeJson(res: Response, status: number, payload: string): void {\n  res.status(status);\n  res.type(\"application/json\");\n  res.setHeader(\"Cache-Control\", \"no-store\");\n  res.send(payload);\n}\n\n/** Measure the encoded body before sending so no partial response escapes. */\nexport function sendJson(res: Response, status: number, body: JsonValue): void {\n  const payload = JSON.stringify(body);\n  if (Buffer.byteLength(payload, \"utf8\") > MAX_RESPONSE_BYTES) {\n    throw new DatabasePluginError(\"PAYLOAD_TOO_LARGE\", \"read\");\n  }\n  writeJson(res, status, payload);\n}\n\n/**\n * Encode the list envelope one row at a time, charging each encoded row\n * against the byte budget before the next row is shaped, so one response\n * never costs more than the budget in memory.\n */\nexport function sendListPage(\n  res: Response,\n  rows: readonly Row[],\n  encodeRow: (row: Row) => JsonValue,\n  limit: number,\n  offset: number,\n): void {\n  const prefix = '{\"items\":[';\n  const suffix = `],\"limit\":${limit},\"offset\":${offset}}`;\n  let bytes =\n    Buffer.byteLength(prefix, \"utf8\") + Buffer.byteLength(suffix, \"utf8\");\n  const items: string[] = [];\n  for (const row of rows) {\n    const encoded = JSON.stringify(encodeRow(row));\n    bytes += Buffer.byteLength(encoded, \"utf8\") + (items.length > 0 ? 1 : 0);\n    if (bytes > MAX_RESPONSE_BYTES) {\n      throw new DatabasePluginError(\"PAYLOAD_TOO_LARGE\", \"read\");\n    }\n    items.push(encoded);\n  }\n  writeJson(res, 200, prefix + items.join(\",\") + suffix);\n}\n\n/** A `204` carries no body but owes the same cache promise as one that does. */\nexport function sendEmpty(res: Response, status: number): void {\n  res.status(status);\n  res.setHeader(\"Cache-Control\", \"no-store\");\n  res.send();\n}\n\n/**\n * Convert a failure into its safe category. A hook's deliberate validation\n * error is the one signal that reaches the caller, and only through the issues\n * naming a public column of this table.\n */\nfunction safeError(\n  table: CrudTable,\n  phase: \"read\" | \"write\",\n  error: unknown,\n): DatabasePluginError {\n  if (!(error instanceof DatabaseValidationError)) {\n    return classifyDatabaseError(error, phase);\n  }\n  const details = error.issues\n    .filter(\n      (issue) => issue.path.length > 0 && table.selectable.has(issue.path[0]),\n    )\n    .map((issue) => ({ path: [...issue.path], message: issue.message }));\n  return new DatabasePluginError(\n    \"VALIDATION_FAILED\",\n    phase,\n    undefined,\n    details,\n  );\n}\n\n/** Answer with the failure's safe category and the field it concerns. */\nexport function sendError(\n  res: Response,\n  table: CrudTable,\n  phase: \"read\" | \"write\",\n  error: unknown,\n): void {\n  if (res.headersSent) return;\n  const safe = safeError(table, phase, error);\n  const body: { error: string; details?: readonly DatabaseErrorDetail[] } = {\n    error: safe.clientMessage,\n  };\n  if (safe.details && safe.details.length > 0) body.details = safe.details;\n  const payload = JSON.stringify(body);\n  // A failure owes the same byte budget, and its details are what can grow.\n  writeJson(\n    res,\n    safe.statusCode,\n    Buffer.byteLength(payload, \"utf8\") > MAX_RESPONSE_BYTES\n      ? JSON.stringify({ error: safe.clientMessage })\n      : payload,\n  );\n}\n"],"mappings":";;;;;;;AAcA,SAAgB,aACd,OACqC;CACrC,MAAM,aACJ,iBAAiB,0BACb,MAAM,aACN,sBAAsB,OAAO,OAAO,CAAC;AAC3C,KAAI,eAAe,IAAK,QAAO;AAC/B,QAAO,aAAa,MAAM,aAAa;;;;;;AAOzC,SAAS,UAAU,KAAe,QAAgB,SAAuB;AACvE,KAAI,OAAO,OAAO;AAClB,KAAI,KAAK,mBAAmB;AAC5B,KAAI,UAAU,iBAAiB,WAAW;AAC1C,KAAI,KAAK,QAAQ;;;AAInB,SAAgB,SAAS,KAAe,QAAgB,MAAuB;CAC7E,MAAM,UAAU,KAAK,UAAU,KAAK;AACpC,KAAI,OAAO,WAAW,SAAS,OAAO,GAAG,mBACvC,OAAM,IAAI,oBAAoB,qBAAqB,OAAO;AAE5D,WAAU,KAAK,QAAQ,QAAQ;;;;;;;AAQjC,SAAgB,aACd,KACA,MACA,WACA,OACA,QACM;CACN,MAAM,SAAS;CACf,MAAM,SAAS,aAAa,MAAM,YAAY,OAAO;CACrD,IAAI,QACF,OAAO,WAAW,QAAQ,OAAO,GAAG,OAAO,WAAW,QAAQ,OAAO;CACvE,MAAM,QAAkB,EAAE;AAC1B,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,UAAU,KAAK,UAAU,UAAU,IAAI,CAAC;AAC9C,WAAS,OAAO,WAAW,SAAS,OAAO,IAAI,MAAM,SAAS,IAAI,IAAI;AACtE,MAAI,QAAQ,mBACV,OAAM,IAAI,oBAAoB,qBAAqB,OAAO;AAE5D,QAAM,KAAK,QAAQ;;AAErB,WAAU,KAAK,KAAK,SAAS,MAAM,KAAK,IAAI,GAAG,OAAO;;;AAIxD,SAAgB,UAAU,KAAe,QAAsB;AAC7D,KAAI,OAAO,OAAO;AAClB,KAAI,UAAU,iBAAiB,WAAW;AAC1C,KAAI,MAAM;;;;;;;AAQZ,SAAS,UACP,OACA,OACA,OACqB;AACrB,KAAI,EAAE,iBAAiB,yBACrB,QAAO,sBAAsB,OAAO,MAAM;AAO5C,QAAO,IAAI,oBACT,qBACA,OACA,QARc,MAAM,OACnB,QACE,UAAU,MAAM,KAAK,SAAS,KAAK,MAAM,WAAW,IAAI,MAAM,KAAK,GAAG,CACxE,CACA,KAAK,WAAW;EAAE,MAAM,CAAC,GAAG,MAAM,KAAK;EAAE,SAAS,MAAM;EAAS,EAAE,CAMrE;;;AAIH,SAAgB,UACd,KACA,OACA,OACA,OACM;AACN,KAAI,IAAI,YAAa;CACrB,MAAM,OAAO,UAAU,OAAO,OAAO,MAAM;CAC3C,MAAM,OAAoE,EACxE,OAAO,KAAK,eACb;AACD,KAAI,KAAK,WAAW,KAAK,QAAQ,SAAS,EAAG,MAAK,UAAU,KAAK;CACjE,MAAM,UAAU,KAAK,UAAU,KAAK;AAEpC,WACE,KACA,KAAK,YACL,OAAO,WAAW,SAAS,OAAO,GAAG,qBACjC,KAAK,UAAU,EAAE,OAAO,KAAK,eAAe,CAAC,GAC7C,QACL"}

package/dist/plugins/database/crud/routes.js

@@ -1,14 +1,9 @@
-import { DatabasePluginError, classifyDatabaseError, invalidDatabaseInput } from "../../../database/errors.js";
-import { MAX_RESPONSE_BYTES } from "../defaults.js";
+import { DatabasePluginError, invalidDatabaseInput } from "../../../database/errors.js";
+import { sendEmpty, sendError, sendJson, sendListPage } from "./response.js";
 import { decodeDetailQuery, decodeListQuery } from "./query.js";
+import { decodeCreateBody, decodeId, decodeUpdateBody } from "./request.js";
 
 //#region src/plugins/database/crud/routes.ts
-/** Low-cardinality span outcome for one failed generated read. */
-function readRouteOutcome(error) {
-	const { statusCode } = classifyDatabaseError(error, "read");
-	if (statusCode === 404) return "not_found";
-	return statusCode < 500 ? "rejected" : "failed";
-}
 /** Express normalizes `req.query`; the decoders need the untouched string. */
 function rawQuery(req) {
 	const url = req.originalUrl ?? req.url;
@@ -38,46 +33,15 @@ function serializeRow(deps, operation, row) {
 	return deps.table.sanitizeSerializedRow(shaped);
 }
 /**
-* Row data is never cacheable by a shared proxy or a browser: the same URL can
-* answer differently once the underlying table or the caller's rights change.
-*/
-function writeJson(res, status, payload) {
-	res.status(status);
-	res.type("application/json");
-	res.setHeader("Cache-Control", "no-store");
-	res.send(payload);
-}
-/** Measure the encoded body before sending so no partial response escapes. */
-function sendJson(res, body) {
-	const payload = JSON.stringify(body);
-	if (Buffer.byteLength(payload, "utf8") > MAX_RESPONSE_BYTES) throw new DatabasePluginError("PAYLOAD_TOO_LARGE", "read");
-	writeJson(res, 200, payload);
-}
-/**
-* Encode the list envelope one row at a time, charging each encoded row
-* against the byte budget before the next row is shaped, so one response
-* never costs more than the budget in memory.
+* A write takes its whole input from the path and the body. A query string
+* would silently look like a filter, so it is refused rather than ignored.
 */
-function encodeListPayload(deps, rows, limit, offset) {
-	const prefix = "{\"items\":[";
-	const suffix = `],"limit":${limit},"offset":${offset}}`;
-	let bytes = Buffer.byteLength(prefix, "utf8") + Buffer.byteLength(suffix, "utf8");
-	const items = [];
-	for (const row of rows) {
-		const encoded = JSON.stringify(serializeRow(deps, "list", row));
-		bytes += Buffer.byteLength(encoded, "utf8") + (items.length > 0 ? 1 : 0);
-		if (bytes > MAX_RESPONSE_BYTES) throw new DatabasePluginError("PAYLOAD_TOO_LARGE", "read");
-		items.push(encoded);
-	}
-	return prefix + items.join(",") + suffix;
+function assertNoQuery(req) {
+	if (rawQuery(req) !== "") throw invalidDatabaseInput(["query"], "Writes accept no query parameters");
 }
-/** Answer with the failure's safe category and the field it concerns. */
-function writeError(res, error) {
-	if (res.headersSent) return;
-	const safe = classifyDatabaseError(error, "read");
-	const body = { error: safe.clientMessage };
-	if (safe.details && safe.details.length > 0) body.details = safe.details;
-	writeJson(res, safe.statusCode, JSON.stringify(body));
+/** The body parser only ran if the caller declared JSON. */
+function assertJsonBody(req) {
+	if (!req.is("application/json")) throw new DatabasePluginError("UNSUPPORTED_MEDIA_TYPE", "write");
 }
 /** `GET /:table` — one bounded page in the `{ items, limit, offset }` envelope. */
 function createListHandler(deps) {
@@ -91,10 +55,10 @@ function createListHandler(deps) {
 				if (decoded.where) query = query.where(decoded.where);
 				if (decoded.select) query = query.select(decoded.select);
 				if (decoded.include) query = query.include(decoded.include);
-				writeJson(res, 200, encodeListPayload(deps, await query.toArray(), decoded.limit, decoded.offset));
+				sendListPage(res, await query.toArray(), (row) => serializeRow(deps, "list", row), decoded.limit, decoded.offset);
 			});
 		} catch (error) {
-			writeError(res, error);
+			sendError(res, deps.table, "read", error);
 		}
 	};
 }
@@ -104,21 +68,76 @@ function createDetailHandler(deps) {
 	return async (req, res) => {
 		try {
 			await deps.runRouteSpan("detail", route, async () => {
-				const id = deps.table.decodeId(req.params.id);
+				const id = decodeId(deps.table, req.params.id);
 				const decoded = decodeDetailQuery(deps.table, rawQuery(req));
 				let query = deps.entity();
 				if (decoded.select) query = query.select(decoded.select);
 				if (decoded.include) query = query.include(decoded.include);
 				const row = await query.find(id);
 				if (row === null) throw new DatabasePluginError("NOT_FOUND", "read");
-				sendJson(res, serializeRow(deps, "detail", row));
+				sendJson(res, 200, serializeRow(deps, "detail", row));
+			});
+		} catch (error) {
+			sendError(res, deps.table, "read", error);
+		}
+	};
+}
+/**
+* `POST /:table` — the created row at `201`. A mutation answers the row the
+* database actually holds, so a read serializer never reshapes it.
+*/
+function createCreateHandler(deps) {
+	const route = `/${deps.table.name}`;
+	return async (req, res) => {
+		try {
+			await deps.runRouteSpan("create", route, async () => {
+				assertNoQuery(req);
+				assertJsonBody(req);
+				const values = decodeCreateBody(deps.table, req.body);
+				const row = await deps.entity().create(values);
+				sendJson(res, 201, deps.table.projectPublicRow(row));
+			});
+		} catch (error) {
+			sendError(res, deps.table, "write", error);
+		}
+	};
+}
+/** `PATCH /:table/:id` — the updated row at `200`, or 404 when it is gone. */
+function createUpdateHandler(deps) {
+	const route = `/${deps.table.name}/:id`;
+	return async (req, res) => {
+		try {
+			await deps.runRouteSpan("update", route, async () => {
+				assertNoQuery(req);
+				assertJsonBody(req);
+				const id = decodeId(deps.table, req.params.id);
+				const values = decodeUpdateBody(deps.table, req.body);
+				const row = await deps.entity().update(id, values);
+				if (row === null) throw new DatabasePluginError("NOT_FOUND", "write");
+				sendJson(res, 200, deps.table.projectPublicRow(row));
+			});
+		} catch (error) {
+			sendError(res, deps.table, "write", error);
+		}
+	};
+}
+/** `DELETE /:table/:id` — `204` with no body, or 404 when nothing matched. */
+function createDeleteHandler(deps) {
+	const route = `/${deps.table.name}/:id`;
+	return async (req, res) => {
+		try {
+			await deps.runRouteSpan("delete", route, async () => {
+				assertNoQuery(req);
+				const id = decodeId(deps.table, req.params.id);
+				if (!await deps.entity().delete(id)) throw new DatabasePluginError("NOT_FOUND", "write");
+				sendEmpty(res, 204);
 			});
 		} catch (error) {
-			writeError(res, error);
+			sendError(res, deps.table, "write", error);
 		}
 	};
 }
 
 //#endregion
-export { createDetailHandler, createListHandler, readRouteOutcome };
+export { createCreateHandler, createDeleteHandler, createDetailHandler, createListHandler, createUpdateHandler };
 //# sourceMappingURL=routes.js.map

package/dist/plugins/database/crud/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","names":[],"sources":["../../../../src/plugins/database/crud/routes.ts"],"sourcesContent":["import type { Request, Response } from \"express\";\n\nimport {\n  classifyDatabaseError,\n  type DatabaseErrorDetail,\n  DatabasePluginError,\n  invalidDatabaseInput,\n} from \"../../../database/errors\";\nimport type {\n  IdValue,\n  IncludeSpec,\n  OrderSpec,\n  Row,\n  WhereClause,\n} from \"../../../database/runtime\";\nimport { MAX_RESPONSE_BYTES } from \"../defaults\";\nimport type { ReadSerializer } from \"../types\";\nimport type { JsonValue } from \"./codecs\";\nimport type { CrudTable } from \"./contract\";\nimport { decodeDetailQuery, decodeListQuery } from \"./query\";\n\n/** The `EntityClient` subset a generated read drives. */\nexport interface CrudReadEntity {\n  where(where: WhereClause): CrudReadEntity;\n  order(order: OrderSpec): CrudReadEntity;\n  select(columns: string[]): CrudReadEntity;\n  include(include: IncludeSpec): CrudReadEntity;\n  limit(limit: number): CrudReadEntity;\n  offset(offset: number): CrudReadEntity;\n  toArray(): Promise<Row[]>;\n  find(id: IdValue): Promise<Row | null>;\n}\n\n/** Everything one table's generated reads need from the plugin instance. */\nexport interface ReadRouteDeps {\n  readonly table: CrudTable;\n  /** Resolved per request so a draining plugin cannot serve a stale client. */\n  entity(): CrudReadEntity;\n  readonly serialize?: ReadSerializer;\n  runRouteSpan(\n    operation: \"list\" | \"detail\",\n    route: string,\n    run: () => Promise<void>,\n  ): Promise<void>;\n}\n\ntype ReadHandler = (req: Request, res: Response) => Promise<void>;\n\n/** Low-cardinality span outcome for one failed generated read. */\nexport function readRouteOutcome(\n  error: unknown,\n): \"not_found\" | \"rejected\" | \"failed\" {\n  const { statusCode } = classifyDatabaseError(error, \"read\");\n  if (statusCode === 404) return \"not_found\";\n  return statusCode < 500 ? \"rejected\" : \"failed\";\n}\n\n/** Express normalizes `req.query`; the decoders need the untouched string. */\nfunction rawQuery(req: Request): string {\n  const url = req.originalUrl ?? req.url;\n  const start = url.indexOf(\"?\");\n  return start === -1 ? \"\" : url.slice(start + 1);\n}\n\n/**\n * Append the primary key so equal sort keys cannot reshuffle between pages.\n * A keyless table has no unique tie-breaker to append, so it must order itself\n * and its pages stay stable only while no concurrent write reorders them.\n */\nfunction stableOrder(\n  primaryKey: string | undefined,\n  order: OrderSpec | undefined,\n): OrderSpec {\n  if (primaryKey)\n    return { ...order, [primaryKey]: order?.[primaryKey] ?? \"asc\" };\n  if (!order) {\n    throw invalidDatabaseInput(\n      [\"order\"],\n      \"A table without a primary key requires an explicit order\",\n    );\n  }\n  return order;\n}\n\nfunction serializeRow(\n  deps: ReadRouteDeps,\n  operation: \"list\" | \"detail\",\n  row: Row,\n): JsonValue {\n  const projected = deps.table.projectPublicRow(row);\n  if (!deps.serialize) return projected;\n  const shaped = deps.serialize(projected as Record<string, unknown>, {\n    entity: deps.table.name,\n    operation,\n  });\n  return deps.table.sanitizeSerializedRow(shaped);\n}\n\n/**\n * Row data is never cacheable by a shared proxy or a browser: the same URL can\n * answer differently once the underlying table or the caller's rights change.\n */\nfunction writeJson(res: Response, status: number, payload: string): void {\n  res.status(status);\n  res.type(\"application/json\");\n  res.setHeader(\"Cache-Control\", \"no-store\");\n  res.send(payload);\n}\n\n/** Measure the encoded body before sending so no partial response escapes. */\nfunction sendJson(res: Response, body: JsonValue): void {\n  const payload = JSON.stringify(body);\n  if (Buffer.byteLength(payload, \"utf8\") > MAX_RESPONSE_BYTES) {\n    throw new DatabasePluginError(\"PAYLOAD_TOO_LARGE\", \"read\");\n  }\n  writeJson(res, 200, payload);\n}\n\n/**\n * Encode the list envelope one row at a time, charging each encoded row\n * against the byte budget before the next row is shaped, so one response\n * never costs more than the budget in memory.\n */\nfunction encodeListPayload(\n  deps: ReadRouteDeps,\n  rows: Row[],\n  limit: number,\n  offset: number,\n): string {\n  const prefix = '{\"items\":[';\n  const suffix = `],\"limit\":${limit},\"offset\":${offset}}`;\n  let bytes =\n    Buffer.byteLength(prefix, \"utf8\") + Buffer.byteLength(suffix, \"utf8\");\n  const items: string[] = [];\n  for (const row of rows) {\n    const encoded = JSON.stringify(serializeRow(deps, \"list\", row));\n    bytes += Buffer.byteLength(encoded, \"utf8\") + (items.length > 0 ? 1 : 0);\n    if (bytes > MAX_RESPONSE_BYTES) {\n      throw new DatabasePluginError(\"PAYLOAD_TOO_LARGE\", \"read\");\n    }\n    items.push(encoded);\n  }\n  return prefix + items.join(\",\") + suffix;\n}\n\n/** Answer with the failure's safe category and the field it concerns. */\nfunction writeError(res: Response, error: unknown): void {\n  if (res.headersSent) return;\n  const safe = classifyDatabaseError(error, \"read\");\n  const body: { error: string; details?: readonly DatabaseErrorDetail[] } = {\n    error: safe.clientMessage,\n  };\n  if (safe.details && safe.details.length > 0) body.details = safe.details;\n  writeJson(res, safe.statusCode, JSON.stringify(body));\n}\n\n/** `GET /:table` — one bounded page in the `{ items, limit, offset }` envelope. */\nexport function createListHandler(deps: ReadRouteDeps): ReadHandler {\n  const primaryKey = deps.table.primaryKey?.meta.columnName;\n  const route = `/${deps.table.name}`;\n\n  return async (req, res) => {\n    try {\n      await deps.runRouteSpan(\"list\", route, async () => {\n        const decoded = decodeListQuery(deps.table, rawQuery(req));\n        let query = deps\n          .entity()\n          .order(stableOrder(primaryKey, decoded.order))\n          .limit(decoded.limit)\n          .offset(decoded.offset);\n        if (decoded.where) query = query.where(decoded.where);\n        if (decoded.select) query = query.select(decoded.select);\n        if (decoded.include) query = query.include(decoded.include);\n\n        const rows = await query.toArray();\n        writeJson(\n          res,\n          200,\n          encodeListPayload(deps, rows, decoded.limit, decoded.offset),\n        );\n      });\n    } catch (error) {\n      writeError(res, error);\n    }\n  };\n}\n\n/** `GET /:table/:id` — one public row, or 404 when nothing matches. */\nexport function createDetailHandler(deps: ReadRouteDeps): ReadHandler {\n  const route = `/${deps.table.name}/:id`;\n\n  return async (req, res) => {\n    try {\n      await deps.runRouteSpan(\"detail\", route, async () => {\n        const id = deps.table.decodeId(req.params.id);\n        const decoded = decodeDetailQuery(deps.table, rawQuery(req));\n        let query = deps.entity();\n        if (decoded.select) query = query.select(decoded.select);\n        if (decoded.include) query = query.include(decoded.include);\n\n        const row = await query.find(id);\n        if (row === null) throw new DatabasePluginError(\"NOT_FOUND\", \"read\");\n        sendJson(res, serializeRow(deps, \"detail\", row));\n      });\n    } catch (error) {\n      writeError(res, error);\n    }\n  };\n}\n"],"mappings":";;;;;;AAiDA,SAAgB,iBACd,OACqC;CACrC,MAAM,EAAE,eAAe,sBAAsB,OAAO,OAAO;AAC3D,KAAI,eAAe,IAAK,QAAO;AAC/B,QAAO,aAAa,MAAM,aAAa;;;AAIzC,SAAS,SAAS,KAAsB;CACtC,MAAM,MAAM,IAAI,eAAe,IAAI;CACnC,MAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,QAAO,UAAU,KAAK,KAAK,IAAI,MAAM,QAAQ,EAAE;;;;;;;AAQjD,SAAS,YACP,YACA,OACW;AACX,KAAI,WACF,QAAO;EAAE,GAAG;GAAQ,aAAa,QAAQ,eAAe;EAAO;AACjE,KAAI,CAAC,MACH,OAAM,qBACJ,CAAC,QAAQ,EACT,2DACD;AAEH,QAAO;;AAGT,SAAS,aACP,MACA,WACA,KACW;CACX,MAAM,YAAY,KAAK,MAAM,iBAAiB,IAAI;AAClD,KAAI,CAAC,KAAK,UAAW,QAAO;CAC5B,MAAM,SAAS,KAAK,UAAU,WAAsC;EAClE,QAAQ,KAAK,MAAM;EACnB;EACD,CAAC;AACF,QAAO,KAAK,MAAM,sBAAsB,OAAO;;;;;;AAOjD,SAAS,UAAU,KAAe,QAAgB,SAAuB;AACvE,KAAI,OAAO,OAAO;AAClB,KAAI,KAAK,mBAAmB;AAC5B,KAAI,UAAU,iBAAiB,WAAW;AAC1C,KAAI,KAAK,QAAQ;;;AAInB,SAAS,SAAS,KAAe,MAAuB;CACtD,MAAM,UAAU,KAAK,UAAU,KAAK;AACpC,KAAI,OAAO,WAAW,SAAS,OAAO,GAAG,mBACvC,OAAM,IAAI,oBAAoB,qBAAqB,OAAO;AAE5D,WAAU,KAAK,KAAK,QAAQ;;;;;;;AAQ9B,SAAS,kBACP,MACA,MACA,OACA,QACQ;CACR,MAAM,SAAS;CACf,MAAM,SAAS,aAAa,MAAM,YAAY,OAAO;CACrD,IAAI,QACF,OAAO,WAAW,QAAQ,OAAO,GAAG,OAAO,WAAW,QAAQ,OAAO;CACvE,MAAM,QAAkB,EAAE;AAC1B,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,UAAU,KAAK,UAAU,aAAa,MAAM,QAAQ,IAAI,CAAC;AAC/D,WAAS,OAAO,WAAW,SAAS,OAAO,IAAI,MAAM,SAAS,IAAI,IAAI;AACtE,MAAI,QAAQ,mBACV,OAAM,IAAI,oBAAoB,qBAAqB,OAAO;AAE5D,QAAM,KAAK,QAAQ;;AAErB,QAAO,SAAS,MAAM,KAAK,IAAI,GAAG;;;AAIpC,SAAS,WAAW,KAAe,OAAsB;AACvD,KAAI,IAAI,YAAa;CACrB,MAAM,OAAO,sBAAsB,OAAO,OAAO;CACjD,MAAM,OAAoE,EACxE,OAAO,KAAK,eACb;AACD,KAAI,KAAK,WAAW,KAAK,QAAQ,SAAS,EAAG,MAAK,UAAU,KAAK;AACjE,WAAU,KAAK,KAAK,YAAY,KAAK,UAAU,KAAK,CAAC;;;AAIvD,SAAgB,kBAAkB,MAAkC;CAClE,MAAM,aAAa,KAAK,MAAM,YAAY,KAAK;CAC/C,MAAM,QAAQ,IAAI,KAAK,MAAM;AAE7B,QAAO,OAAO,KAAK,QAAQ;AACzB,MAAI;AACF,SAAM,KAAK,aAAa,QAAQ,OAAO,YAAY;IACjD,MAAM,UAAU,gBAAgB,KAAK,OAAO,SAAS,IAAI,CAAC;IAC1D,IAAI,QAAQ,KACT,QAAQ,CACR,MAAM,YAAY,YAAY,QAAQ,MAAM,CAAC,CAC7C,MAAM,QAAQ,MAAM,CACpB,OAAO,QAAQ,OAAO;AACzB,QAAI,QAAQ,MAAO,SAAQ,MAAM,MAAM,QAAQ,MAAM;AACrD,QAAI,QAAQ,OAAQ,SAAQ,MAAM,OAAO,QAAQ,OAAO;AACxD,QAAI,QAAQ,QAAS,SAAQ,MAAM,QAAQ,QAAQ,QAAQ;AAG3D,cACE,KACA,KACA,kBAAkB,MAJP,MAAM,MAAM,SAAS,EAIF,QAAQ,OAAO,QAAQ,OAAO,CAC7D;KACD;WACK,OAAO;AACd,cAAW,KAAK,MAAM;;;;;AAM5B,SAAgB,oBAAoB,MAAkC;CACpE,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK;AAElC,QAAO,OAAO,KAAK,QAAQ;AACzB,MAAI;AACF,SAAM,KAAK,aAAa,UAAU,OAAO,YAAY;IACnD,MAAM,KAAK,KAAK,MAAM,SAAS,IAAI,OAAO,GAAG;IAC7C,MAAM,UAAU,kBAAkB,KAAK,OAAO,SAAS,IAAI,CAAC;IAC5D,IAAI,QAAQ,KAAK,QAAQ;AACzB,QAAI,QAAQ,OAAQ,SAAQ,MAAM,OAAO,QAAQ,OAAO;AACxD,QAAI,QAAQ,QAAS,SAAQ,MAAM,QAAQ,QAAQ,QAAQ;IAE3D,MAAM,MAAM,MAAM,MAAM,KAAK,GAAG;AAChC,QAAI,QAAQ,KAAM,OAAM,IAAI,oBAAoB,aAAa,OAAO;AACpE,aAAS,KAAK,aAAa,MAAM,UAAU,IAAI,CAAC;KAChD;WACK,OAAO;AACd,cAAW,KAAK,MAAM"}
+{"version":3,"file":"routes.js","names":[],"sources":["../../../../src/plugins/database/crud/routes.ts"],"sourcesContent":["import type { Request, Response } from \"express\";\n\nimport {\n  DatabasePluginError,\n  invalidDatabaseInput,\n} from \"../../../database/errors\";\nimport type {\n  IdValue,\n  IncludeSpec,\n  OrderSpec,\n  Row,\n  WhereClause,\n} from \"../../../database/runtime\";\nimport type { ReadSerializer } from \"../types\";\nimport type { JsonValue } from \"./codecs\";\nimport type { CrudTable } from \"./contract\";\nimport { decodeDetailQuery, decodeListQuery } from \"./query\";\nimport { decodeCreateBody, decodeId, decodeUpdateBody } from \"./request\";\nimport { sendEmpty, sendError, sendJson, sendListPage } from \"./response\";\n\n/** The `EntityClient` subset the generated routes drive. */\nexport interface CrudEntity {\n  where(where: WhereClause): CrudEntity;\n  order(order: OrderSpec): CrudEntity;\n  select(columns: string[]): CrudEntity;\n  include(include: IncludeSpec): CrudEntity;\n  limit(limit: number): CrudEntity;\n  offset(offset: number): CrudEntity;\n  toArray(): Promise<Row[]>;\n  find(id: IdValue): Promise<Row | null>;\n  create(values: Row): Promise<Row>;\n  update(id: IdValue, values: Row): Promise<Row | null>;\n  delete(id: IdValue): Promise<boolean>;\n}\n\n/** Which generated operation a span and its route belong to. */\nexport type CrudOperation = \"list\" | \"detail\" | \"create\" | \"update\" | \"delete\";\n\n/** Everything one table's generated routes need from the plugin instance. */\nexport interface CrudRouteDeps {\n  readonly table: CrudTable;\n  /** Resolved per request so a draining plugin cannot serve a stale client. */\n  entity(): CrudEntity;\n  readonly serialize?: ReadSerializer;\n  runRouteSpan(\n    operation: CrudOperation,\n    route: string,\n    run: () => Promise<void>,\n  ): Promise<void>;\n}\n\ntype RouteHandler = (req: Request, res: Response) => Promise<void>;\n\n/** Express normalizes `req.query`; the decoders need the untouched string. */\nfunction rawQuery(req: Request): string {\n  const url = req.originalUrl ?? req.url;\n  const start = url.indexOf(\"?\");\n  return start === -1 ? \"\" : url.slice(start + 1);\n}\n\n/**\n * Append the primary key so equal sort keys cannot reshuffle between pages.\n * A keyless table has no unique tie-breaker to append, so it must order itself\n * and its pages stay stable only while no concurrent write reorders them.\n */\nfunction stableOrder(\n  primaryKey: string | undefined,\n  order: OrderSpec | undefined,\n): OrderSpec {\n  if (primaryKey)\n    return { ...order, [primaryKey]: order?.[primaryKey] ?? \"asc\" };\n  if (!order) {\n    throw invalidDatabaseInput(\n      [\"order\"],\n      \"A table without a primary key requires an explicit order\",\n    );\n  }\n  return order;\n}\n\nfunction serializeRow(\n  deps: CrudRouteDeps,\n  operation: \"list\" | \"detail\",\n  row: Row,\n): JsonValue {\n  const projected = deps.table.projectPublicRow(row);\n  if (!deps.serialize) return projected;\n  const shaped = deps.serialize(projected as Record<string, unknown>, {\n    entity: deps.table.name,\n    operation,\n  });\n  return deps.table.sanitizeSerializedRow(shaped);\n}\n\n/**\n * A write takes its whole input from the path and the body. A query string\n * would silently look like a filter, so it is refused rather than ignored.\n */\nfunction assertNoQuery(req: Request): void {\n  if (rawQuery(req) !== \"\") {\n    throw invalidDatabaseInput([\"query\"], \"Writes accept no query parameters\");\n  }\n}\n\n/** The body parser only ran if the caller declared JSON. */\nfunction assertJsonBody(req: Request): void {\n  if (!req.is(\"application/json\")) {\n    throw new DatabasePluginError(\"UNSUPPORTED_MEDIA_TYPE\", \"write\");\n  }\n}\n\n/** `GET /:table` — one bounded page in the `{ items, limit, offset }` envelope. */\nexport function createListHandler(deps: CrudRouteDeps): RouteHandler {\n  const primaryKey = deps.table.primaryKey?.meta.columnName;\n  const route = `/${deps.table.name}`;\n\n  return async (req, res) => {\n    try {\n      await deps.runRouteSpan(\"list\", route, async () => {\n        const decoded = decodeListQuery(deps.table, rawQuery(req));\n        let query = deps\n          .entity()\n          .order(stableOrder(primaryKey, decoded.order))\n          .limit(decoded.limit)\n          .offset(decoded.offset);\n        if (decoded.where) query = query.where(decoded.where);\n        if (decoded.select) query = query.select(decoded.select);\n        if (decoded.include) query = query.include(decoded.include);\n\n        const rows = await query.toArray();\n        sendListPage(\n          res,\n          rows,\n          (row) => serializeRow(deps, \"list\", row),\n          decoded.limit,\n          decoded.offset,\n        );\n      });\n    } catch (error) {\n      sendError(res, deps.table, \"read\", error);\n    }\n  };\n}\n\n/** `GET /:table/:id` — one public row, or 404 when nothing matches. */\nexport function createDetailHandler(deps: CrudRouteDeps): RouteHandler {\n  const route = `/${deps.table.name}/:id`;\n\n  return async (req, res) => {\n    try {\n      await deps.runRouteSpan(\"detail\", route, async () => {\n        const id = decodeId(deps.table, req.params.id);\n        const decoded = decodeDetailQuery(deps.table, rawQuery(req));\n        let query = deps.entity();\n        if (decoded.select) query = query.select(decoded.select);\n        if (decoded.include) query = query.include(decoded.include);\n\n        const row = await query.find(id);\n        if (row === null) throw new DatabasePluginError(\"NOT_FOUND\", \"read\");\n        sendJson(res, 200, serializeRow(deps, \"detail\", row));\n      });\n    } catch (error) {\n      sendError(res, deps.table, \"read\", error);\n    }\n  };\n}\n\n/**\n * `POST /:table` — the created row at `201`. A mutation answers the row the\n * database actually holds, so a read serializer never reshapes it.\n */\nexport function createCreateHandler(deps: CrudRouteDeps): RouteHandler {\n  const route = `/${deps.table.name}`;\n\n  return async (req, res) => {\n    try {\n      await deps.runRouteSpan(\"create\", route, async () => {\n        assertNoQuery(req);\n        assertJsonBody(req);\n        const values = decodeCreateBody(deps.table, req.body);\n        const row = await deps.entity().create(values);\n        sendJson(res, 201, deps.table.projectPublicRow(row));\n      });\n    } catch (error) {\n      sendError(res, deps.table, \"write\", error);\n    }\n  };\n}\n\n/** `PATCH /:table/:id` — the updated row at `200`, or 404 when it is gone. */\nexport function createUpdateHandler(deps: CrudRouteDeps): RouteHandler {\n  const route = `/${deps.table.name}/:id`;\n\n  return async (req, res) => {\n    try {\n      await deps.runRouteSpan(\"update\", route, async () => {\n        assertNoQuery(req);\n        assertJsonBody(req);\n        const id = decodeId(deps.table, req.params.id);\n        const values = decodeUpdateBody(deps.table, req.body);\n        const row = await deps.entity().update(id, values);\n        if (row === null) throw new DatabasePluginError(\"NOT_FOUND\", \"write\");\n        sendJson(res, 200, deps.table.projectPublicRow(row));\n      });\n    } catch (error) {\n      sendError(res, deps.table, \"write\", error);\n    }\n  };\n}\n\n/** `DELETE /:table/:id` — `204` with no body, or 404 when nothing matched. */\nexport function createDeleteHandler(deps: CrudRouteDeps): RouteHandler {\n  const route = `/${deps.table.name}/:id`;\n\n  return async (req, res) => {\n    try {\n      await deps.runRouteSpan(\"delete\", route, async () => {\n        assertNoQuery(req);\n        const id = decodeId(deps.table, req.params.id);\n        const deleted = await deps.entity().delete(id);\n        if (!deleted) throw new DatabasePluginError(\"NOT_FOUND\", \"write\");\n        sendEmpty(res, 204);\n      });\n    } catch (error) {\n      sendError(res, deps.table, \"write\", error);\n    }\n  };\n}\n"],"mappings":";;;;;;;AAsDA,SAAS,SAAS,KAAsB;CACtC,MAAM,MAAM,IAAI,eAAe,IAAI;CACnC,MAAM,QAAQ,IAAI,QAAQ,IAAI;AAC9B,QAAO,UAAU,KAAK,KAAK,IAAI,MAAM,QAAQ,EAAE;;;;;;;AAQjD,SAAS,YACP,YACA,OACW;AACX,KAAI,WACF,QAAO;EAAE,GAAG;GAAQ,aAAa,QAAQ,eAAe;EAAO;AACjE,KAAI,CAAC,MACH,OAAM,qBACJ,CAAC,QAAQ,EACT,2DACD;AAEH,QAAO;;AAGT,SAAS,aACP,MACA,WACA,KACW;CACX,MAAM,YAAY,KAAK,MAAM,iBAAiB,IAAI;AAClD,KAAI,CAAC,KAAK,UAAW,QAAO;CAC5B,MAAM,SAAS,KAAK,UAAU,WAAsC;EAClE,QAAQ,KAAK,MAAM;EACnB;EACD,CAAC;AACF,QAAO,KAAK,MAAM,sBAAsB,OAAO;;;;;;AAOjD,SAAS,cAAc,KAAoB;AACzC,KAAI,SAAS,IAAI,KAAK,GACpB,OAAM,qBAAqB,CAAC,QAAQ,EAAE,oCAAoC;;;AAK9E,SAAS,eAAe,KAAoB;AAC1C,KAAI,CAAC,IAAI,GAAG,mBAAmB,CAC7B,OAAM,IAAI,oBAAoB,0BAA0B,QAAQ;;;AAKpE,SAAgB,kBAAkB,MAAmC;CACnE,MAAM,aAAa,KAAK,MAAM,YAAY,KAAK;CAC/C,MAAM,QAAQ,IAAI,KAAK,MAAM;AAE7B,QAAO,OAAO,KAAK,QAAQ;AACzB,MAAI;AACF,SAAM,KAAK,aAAa,QAAQ,OAAO,YAAY;IACjD,MAAM,UAAU,gBAAgB,KAAK,OAAO,SAAS,IAAI,CAAC;IAC1D,IAAI,QAAQ,KACT,QAAQ,CACR,MAAM,YAAY,YAAY,QAAQ,MAAM,CAAC,CAC7C,MAAM,QAAQ,MAAM,CACpB,OAAO,QAAQ,OAAO;AACzB,QAAI,QAAQ,MAAO,SAAQ,MAAM,MAAM,QAAQ,MAAM;AACrD,QAAI,QAAQ,OAAQ,SAAQ,MAAM,OAAO,QAAQ,OAAO;AACxD,QAAI,QAAQ,QAAS,SAAQ,MAAM,QAAQ,QAAQ,QAAQ;AAG3D,iBACE,KAFW,MAAM,MAAM,SAAS,GAI/B,QAAQ,aAAa,MAAM,QAAQ,IAAI,EACxC,QAAQ,OACR,QAAQ,OACT;KACD;WACK,OAAO;AACd,aAAU,KAAK,KAAK,OAAO,QAAQ,MAAM;;;;;AAM/C,SAAgB,oBAAoB,MAAmC;CACrE,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK;AAElC,QAAO,OAAO,KAAK,QAAQ;AACzB,MAAI;AACF,SAAM,KAAK,aAAa,UAAU,OAAO,YAAY;IACnD,MAAM,KAAK,SAAS,KAAK,OAAO,IAAI,OAAO,GAAG;IAC9C,MAAM,UAAU,kBAAkB,KAAK,OAAO,SAAS,IAAI,CAAC;IAC5D,IAAI,QAAQ,KAAK,QAAQ;AACzB,QAAI,QAAQ,OAAQ,SAAQ,MAAM,OAAO,QAAQ,OAAO;AACxD,QAAI,QAAQ,QAAS,SAAQ,MAAM,QAAQ,QAAQ,QAAQ;IAE3D,MAAM,MAAM,MAAM,MAAM,KAAK,GAAG;AAChC,QAAI,QAAQ,KAAM,OAAM,IAAI,oBAAoB,aAAa,OAAO;AACpE,aAAS,KAAK,KAAK,aAAa,MAAM,UAAU,IAAI,CAAC;KACrD;WACK,OAAO;AACd,aAAU,KAAK,KAAK,OAAO,QAAQ,MAAM;;;;;;;;AAS/C,SAAgB,oBAAoB,MAAmC;CACrE,MAAM,QAAQ,IAAI,KAAK,MAAM;AAE7B,QAAO,OAAO,KAAK,QAAQ;AACzB,MAAI;AACF,SAAM,KAAK,aAAa,UAAU,OAAO,YAAY;AACnD,kBAAc,IAAI;AAClB,mBAAe,IAAI;IACnB,MAAM,SAAS,iBAAiB,KAAK,OAAO,IAAI,KAAK;IACrD,MAAM,MAAM,MAAM,KAAK,QAAQ,CAAC,OAAO,OAAO;AAC9C,aAAS,KAAK,KAAK,KAAK,MAAM,iBAAiB,IAAI,CAAC;KACpD;WACK,OAAO;AACd,aAAU,KAAK,KAAK,OAAO,SAAS,MAAM;;;;;AAMhD,SAAgB,oBAAoB,MAAmC;CACrE,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK;AAElC,QAAO,OAAO,KAAK,QAAQ;AACzB,MAAI;AACF,SAAM,KAAK,aAAa,UAAU,OAAO,YAAY;AACnD,kBAAc,IAAI;AAClB,mBAAe,IAAI;IACnB,MAAM,KAAK,SAAS,KAAK,OAAO,IAAI,OAAO,GAAG;IAC9C,MAAM,SAAS,iBAAiB,KAAK,OAAO,IAAI,KAAK;IACrD,MAAM,MAAM,MAAM,KAAK,QAAQ,CAAC,OAAO,IAAI,OAAO;AAClD,QAAI,QAAQ,KAAM,OAAM,IAAI,oBAAoB,aAAa,QAAQ;AACrE,aAAS,KAAK,KAAK,KAAK,MAAM,iBAAiB,IAAI,CAAC;KACpD;WACK,OAAO;AACd,aAAU,KAAK,KAAK,OAAO,SAAS,MAAM;;;;;AAMhD,SAAgB,oBAAoB,MAAmC;CACrE,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK;AAElC,QAAO,OAAO,KAAK,QAAQ;AACzB,MAAI;AACF,SAAM,KAAK,aAAa,UAAU,OAAO,YAAY;AACnD,kBAAc,IAAI;IAClB,MAAM,KAAK,SAAS,KAAK,OAAO,IAAI,OAAO,GAAG;AAE9C,QAAI,CADY,MAAM,KAAK,QAAQ,CAAC,OAAO,GAAG,CAChC,OAAM,IAAI,oBAAoB,aAAa,QAAQ;AACjE,cAAU,KAAK,IAAI;KACnB;WACK,OAAO;AACd,aAAU,KAAK,KAAK,OAAO,SAAS,MAAM"}

package/dist/plugins/database/database.d.ts

@@ -19,18 +19,20 @@ declare class DatabasePlugin<TSchema extends Schema> extends Plugin<IDatabaseCon
   private setupPromise;
   private draining;
   private shutdownPromise;
-  private exposedTables;
+  private exposure;
   constructor(config: IDatabaseConfig<TSchema>);
   /** Build and verify one candidate state before publishing its exports. */
   setup(): Promise<void>;
-  /** Register generated reads for explicitly exposed tables only. */
+  /** Register generated CRUD, subject to the configured table and write restrictions. */
   injectRoutes(router: express.Router): void;
+  /** Typed hook keys are schema table names, which routing addresses at runtime. */
+  private hooks;
   /** Return the typed database API only while the plugin is active. */
   exports(): DatabaseExports;
   /** Stop new work, wait for setup, and close the owned pool exactly once. */
   shutdown(): Promise<void>;
-  /** Trace one generated read with allowlisted, low-cardinality attributes. */
-  private runReadSpan;
+  /** Trace one generated route with allowlisted, low-cardinality attributes. */
+  private runRouteSpan;
 }
 /** Create a typed database plugin registration for a finalized schema. */
 declare function database<TSchema extends Schema>(config: IDatabaseConfig<TSchema>): {

package/dist/plugins/database/database.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"database.d.ts","names":[],"sources":["../../../src/plugins/database/database.ts"],"mappings":";;;;;;;;;;;;;cAyBa,cAAA,iBAA+B,MAAA,UAAgB,MAAA,CAC1D,eAAA,CAAgB,OAAA;;SAGT,QAAA,EAAuB,cAAA;EAAA,UACZ,MAAA,EAAQ,eAAA,CAAgB,OAAA;EAAA,QAClC,KAAA;EAAA,QACA,YAAA;EAAA,QACA,QAAA;EAAA,QACA,eAAA;EAAA,QACA,aAAA;cAEI,MAAA,EAAQ,eAAA,CAAgB,OAAA;EARN;EAkBxB,KAAA,CAAA,GAAS,OAAA;EAjBW;EA2C1B,YAAA,CAAa,MAAA,EAAQ,OAAA,CAAQ,MAAA;EApCT;EA+EpB,OAAA,CAAA,GAOO,eAAA;EAlDc;EAsDf,QAAA,CAAA,GAAY,OAAA;EAAA;EAAA,QAoBV,WAAA;AAAA;;iBA+BM,QAAA,iBAAyB,MAAA,CAAA,CACvC,MAAA,EAAQ,eAAA,CAAgB,OAAA;UAGe,iBAAA,CACnC,gBAAA,EACA,cAAA,CAAe,OAAA"}
+{"version":3,"file":"database.d.ts","names":[],"sources":["../../../src/plugins/database/database.ts"],"mappings":";;;;;;;;;;;;;cA6Ba,cAAA,iBAA+B,MAAA,UAAgB,MAAA,CAC1D,eAAA,CAAgB,OAAA;;SAGT,QAAA,EAAuB,cAAA;EAAA,UACZ,MAAA,EAAQ,eAAA,CAAgB,OAAA;EAAA,QAClC,KAAA;EAAA,QACA,YAAA;EAAA,QACA,QAAA;EAAA,QACA,eAAA;EAAA,QACA,QAAA;cAEI,MAAA,EAAQ,eAAA,CAAgB,OAAA;EARN;EAwBxB,KAAA,CAAA,GAAS,OAAA;EAvBW;EA0D1B,YAAA,CAAa,MAAA,EAAQ,OAAA,CAAQ,MAAA;EAnDT;EAAA,QAqHZ,KAAA;EAlEa;EAuErB,OAAA,CAAA,GAOO,eAAA;EAIW;EAAZ,QAAA,CAAA,GAAY,OAAA;EAjJ8C;EAAA,QAqKxD,YAAA;AAAA;;iBA+BM,QAAA,iBAAyB,MAAA,CAAA,CACvC,MAAA,EAAQ,eAAA,CAAgB,OAAA;UAGe,iBAAA,CACnC,gBAAA,EACA,cAAA,CAAe,OAAA"}