@teleporthq/teleport-plugin-next-data-source 0.43.75 → 0.44.1

package/dist/cjs/fetchers/pg-client-import.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PG_CLIENT_IMPORT = void 0;
+/**
+ * The `pg` import of a generated Postgres fetcher.
+ *
+ * A Postgres DATE is a calendar day, not an instant. node-pg reads it as
+ * midnight in the server's time zone, so a server east of UTC sends
+ * `2026-10-09` as `2026-10-08T21:00:00.000Z`: a list shows the day before, and
+ * a form that loads the row saves that day back. The day is kept as its own
+ * text (`YYYY-MM-DD`), which every reader of the value already understands.
+ * A stand-in driver without `types` leaves the parsers alone.
+ */
+exports.PG_CLIENT_IMPORT = "import { Client, types as pgTypes } from 'pg'\n\n// A DATE stays the day it names, whatever the server's time zone.\nif (pgTypes && typeof pgTypes.setTypeParser === 'function') {\n  pgTypes.setTypeParser(1082, (value) => value)\n}";
+//# sourceMappingURL=pg-client-import.js.map

package/dist/cjs/fetchers/pg-client-import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pg-client-import.js","sourceRoot":"","sources":["../../../src/fetchers/pg-client-import.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACU,QAAA,gBAAgB,GAAG,wOAK9B,CAAA"}

package/dist/cjs/fetchers/postgresql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgresql.d.ts","sourceRoot":"","sources":["../../../src/fetchers/postgresql.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,yBAAyB,WAC5B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,uBACG,cAAc,MAAM,CAAC,KACxC,MAkSF,CAAA;AAED,eAAO,MAAM,8BAA8B,WACjC,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MAkGF,CAAA"}
+{"version":3,"file":"postgresql.d.ts","sourceRoot":"","sources":["../../../src/fetchers/postgresql.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,yBAAyB,WAC5B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,uBACG,cAAc,MAAM,CAAC,KACxC,MAsSF,CAAA;AAED,eAAO,MAAM,8BAA8B,WACjC,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MAkGF,CAAA"}

package/dist/cjs/fetchers/postgresql.js

@@ -3,11 +3,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.generatePostgreSQLCountFetcher = exports.generatePostgreSQLFetcher = void 0;
 var utils_1 = require("../utils");
 var product_price_sort_1 = require("../product-price-sort");
+var list_sort_order_1 = require("../list-sort-order");
 var row_order_1 = require("../row-order");
 var product_filter_fields_1 = require("../product-filter-fields");
 var table_access_guard_1 = require("./utils/table-access-guard");
 var request_sql_guards_1 = require("./utils/request-sql-guards");
 var array_overlap_sql_1 = require("../array-overlap-sql");
+var pg_client_import_1 = require("./pg-client-import");
 var generatePostgreSQLFetcher = function (config, tableName, trustedReaderRoles) {
     var _a;
     if (trustedReaderRoles === void 0) { trustedReaderRoles = []; }
@@ -20,7 +22,7 @@ var generatePostgreSQLFetcher = function (config, tableName, trustedReaderRoles)
             : pgConfig.sslConfig
                 ? "{\n      ".concat(pgConfig.sslConfig.ca ? "ca: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.ca), ",") : '', "\n      ").concat(pgConfig.sslConfig.cert ? "cert: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.cert), ",") : '', "\n      ").concat(pgConfig.sslConfig.key ? "key: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.key), ",") : '', "\n      rejectUnauthorized: false\n    }")
                 : '{ rejectUnauthorized: false }', "\n  }");
-    return "import { Client } from 'pg'\n\n".concat((0, table_access_guard_1.generateTableAccessPreamble)(trustedReaderRoles), "\n\nconst getClient = () => {\n  return new Client(").concat(clientConfig, ")\n}\n\n").concat((0, utils_1.generateSafeJSONParseCode)(), "\n\n").concat((0, utils_1.generateFilterTreeHelpersCode)(), "\n\n").concat((0, utils_1.generateSearchEscapeHelpersCode)(), "\n").concat((0, array_overlap_sql_1.generateArrayOverlapSqlCode)(), "\n\n// Builds one SQL clause for the whole filter tree, so an OR group nested in\n// the root AND keeps its meaning instead of being flattened into ANDs.\n").concat((0, request_sql_guards_1.generateRequestSqlGuardsCode)(), "\nconst processFilters = (filters, conditions, queryParams, paramIndex) => {\n  if (!filters) return paramIndex\n  \n  const filterTree = normalizeFilterTree(safeJSONParse(filters))\n  if (!filterTree) return paramIndex\n  \n  const buildCondition = (condition) => {\n    const field = condition.source\n    const normalizedCondition = normalizeInOperand(condition.operand, condition.destination)\n    if (normalizedCondition === null) return null\n    const value = normalizedCondition.value\n    const operand = normalizedCondition.operand\n    \n    // The products table's virtual fields (effective price, rating bucket,\n    // on-sale flag, variant axes) are whole clauses, not columns - so they are\n    // answered before any branch below can interpolate the field name raw.\n    const productClause = productFilterClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (productClause !== null) return productClause\n    assertRequestColumn(field, 'filter field')\n    \n    if (Array.isArray(value)) {\n      if (value.length === 0) return null\n      if (operand === 'array_overlap') {\n        // The row's list (see array-overlap-sql.ts) shares any value with the set.\n        const clause = arrayOverlapSql([field], '$' + paramIndex)\n        queryParams.push(value.map((entry) => String(entry)))\n        paramIndex++\n        return clause\n      }\n      const placeholders = value.map(() => `$${paramIndex++}`)\n      queryParams.push(...value)\n      return operand === '!='\n        ? `${field} NOT IN (${placeholders.join(', ')})`\n        : `${field} IN (${placeholders.join(', ')})`\n    }\n    \n    if (operand === 'array_overlap') {\n      if (value === '' || value === null || value === undefined) return null\n      // A single comma-joined string (the multi-select Category Filter's\n      // ?categoryFilter=a,b,c) expands to multiple ids; one id stays one.\n      const overlapValues = String(value).split(',').map((entry) => entry.trim()).filter(Boolean)\n      if (overlapValues.length === 0) return null\n      const clause = arrayOverlapSql([field], '$' + paramIndex)\n      queryParams.push(overlapValues)\n      paramIndex++\n      return clause\n    }\n    \n    if (value === null) {\n      if (operand === '=') return `${field} IS NULL`\n      if (operand === '!=') return `${field} IS NOT NULL`\n      return null\n    }\n    \n    const validOps = ['=', '!=', '>', '<', '>=', '<=']\n    const sqlOperator = validOps.includes(operand) ? operand : '='\n    const clause = `${field} ${sqlOperator} $${paramIndex}`\n    queryParams.push(value)\n    paramIndex++\n    return clause\n  }\n  \n  const clause = buildFilterTreeClause(filterTree, buildCondition)\n  if (clause) conditions.push(clause)\n  \n  return paramIndex\n}\n\n").concat((0, utils_1.generateDateFormatterCode)(), "\n\n").concat((0, product_price_sort_1.generateSortFieldSqlHelper)(tableName), "\n\n").concat((0, product_price_sort_1.generateSortFallbackFieldHelper)(tableName), "\n\n").concat((0, row_order_1.generateRowOrderTiebreakHelper)((0, row_order_1.rowIdentityColumn)(config, tableName)), "\n\n").concat((0, product_filter_fields_1.generateProductFilterClauseHelper)(tableName), "\n\nexport default async function handler(req, res) {\n").concat((0, table_access_guard_1.generateReadGuardCall)(tableName, null), "\n  const client = getClient()\n  \n  try {\n    await client.connect()\n    ").concat(schema ? "await client.query('SET search_path TO ".concat(schema, "')") : '', "\n    \n    const { query, queryColumns, limit, page, perPage, sortBy, sortOrder, filters, sorts, offset } = req.query\n    // A visitor never filters, sorts or searches by a column it is not served.\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    \n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    \n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        // Use specified columns. Wrap non-arrays so that a single\n        // column passed as a bare string doesn't get iterated as chars.\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : (parsed ? [parsed] : [])\n      } else {\n        // Fallback: Get all columns from information_schema\n        try {\n          const schemaQuery = `\n            SELECT column_name\n            FROM information_schema.columns\n            WHERE table_name = $1\n            ").concat(schema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = schema \n            ? [").concat(JSON.stringify(tableName), ", ").concat(JSON.stringify(schema), "]\n            : [").concat(JSON.stringify(tableName), "]\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          columns = schemaResult.rows.map(row => row.column_name)\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n          // Continue without search if we can't get columns\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      if (columns.length > 0) {\n        const pattern = '%' + escapeLikePattern(query) + '%'\n        const placeholder = '$' + paramIndex\n        paramIndex++\n        queryParams.push(pattern)\n        const searchConditions = columns.map(\n          (col) => '\"' + sanitizeSearchIdentifier(col) + '\"::text ILIKE ' + placeholder + \" ESCAPE '|'\"\n        )\n        conditions.push('(' + searchConditions.join(' OR ') + ')')\n      }\n    }\n\n    // Apply filters using helper function\n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n    \n    let sql = `SELECT * FROM \"").concat(tableName, "\"`\n    \n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`\n    }\n    \n    // Handle sorts - new array format. Two ORDER BY clauses are built: the one\n    // actually used, and a plain-column twin kept only as the fallback below.\n    let orderBySql = ''\n    let plainOrderBySql = ''\n    if (sorts) {\n      const parsedSorts = safeJSONParse(sorts)\n      if (Array.isArray(parsedSorts) && parsedSorts.length > 0) {\n        const valid = parsedSorts.filter((sort) => sort && sort.field)\n        valid.forEach((sort) => assertRequestColumn(sort.field, 'sort field'))\n        const orderOf = (sort) => (sort.order || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n        const orderClauses = valid.map((sort) => `${sortFieldSql(sort.field)} ${orderOf(sort)}`)\n        const plainClauses = valid.map((sort) => `${sortFallbackField(sort.field)} ${orderOf(sort)}`)\n\n        if (orderClauses.length > 0) {\n          // The row's own key last, so equal rows can't repeat across pages\n          // or vanish between them.\n          const tiebreak = rowOrderTiebreak(valid.map((sort) => sort.field), orderOf(valid[valid.length - 1]))\n          orderBySql = ` ORDER BY ${orderClauses.join(', ')}${tiebreak}`\n          plainOrderBySql = ` ORDER BY ${plainClauses.join(', ')}${tiebreak}`\n        }\n      }\n    } else if (sortBy) {\n      assertRequestColumn(sortBy, 'sort field')\n      const sortByDirection = (sortOrder || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n      orderBySql = ` ORDER BY ${sortBy} ${sortByDirection}${rowOrderTiebreak([sortBy], sortByDirection)}`\n      plainOrderBySql = orderBySql\n    }\n    const usedDiscountAwareSort = orderBySql !== plainOrderBySql\n\n    const limitValue = requestRowCount(limit || perPage)\n    const offsetValue = offset !== undefined ? parseInt(offset) : (page && perPage ? (parseInt(page) - 1) * parseInt(perPage) : undefined)\n\n    let sqlTail = ''\n    if (limitValue !== undefined) {\n      sqlTail += ` LIMIT ${limitValue}`\n    }\n    \n    if (offsetValue !== undefined) {\n      sqlTail += ` OFFSET ${offsetValue}`\n    }\n\n    const baseSql = sql\n    sql = baseSql + orderBySql + sqlTail\n    \n    // The discount-aware price ordering is an inline sub-select over a JSON\n    // column. It is written to be unraisable, but it runs inside ORDER BY for\n    // the whole table \u2014 so if a database ever rejects it, fall back to ordering\n    // by the stored list price rather than serving an empty products page.\n    let result\n    try {\n      result = await client.query(sql, queryParams)\n    } catch (sortError) {\n      if (!usedDiscountAwareSort) throw sortError\n      console.warn(\n        'Discount-aware price sort failed; falling back to the list price:',\n        sortError && sortError.message\n      )\n      result = await client.query(baseSql + plainOrderBySql + sqlTail, queryParams)\n    }\n    const rows = Array.isArray(result?.rows) ? result.rows : []\n    const plainRows = rows.map((row) =>\n      row && typeof row.toJSON === 'function' ? row.toJSON() : row\n    )\n    const safeData = JSON.parse(JSON.stringify(plainRows, dateReplacer))\n\n    return res.status(200).json({\n      success: true,\n      data: __taWithoutCredentials(\n        __rowPolicy ? __brpStripHidden(__rowPolicy, safeData) : safeData,\n        ").concat(JSON.stringify(tableName), "\n      ),\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('PostgreSQL fetch error:', error)\n    // A database error names tables, columns and values: it stays in the server\n    // log. Only an error this route raised for the caller (it carries a status)\n    // is repeated to it.\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to fetch data',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing PostgreSQL client:', error)\n      }\n    }\n  }\n}\n");
+    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\n").concat((0, table_access_guard_1.generateTableAccessPreamble)(trustedReaderRoles), "\n\nconst getClient = () => {\n  return new Client(").concat(clientConfig, ")\n}\n\n").concat((0, utils_1.generateSafeJSONParseCode)(), "\n\n").concat((0, utils_1.generateFilterTreeHelpersCode)(), "\n\n").concat((0, utils_1.generateSearchEscapeHelpersCode)(), "\n").concat((0, array_overlap_sql_1.generateArrayOverlapSqlCode)(), "\n\n// Builds one SQL clause for the whole filter tree, so an OR group nested in\n// the root AND keeps its meaning instead of being flattened into ANDs.\n").concat((0, request_sql_guards_1.generateRequestSqlGuardsCode)(), "\nconst processFilters = (filters, conditions, queryParams, paramIndex) => {\n  if (!filters) return paramIndex\n  \n  const filterTree = normalizeFilterTree(safeJSONParse(filters))\n  if (!filterTree) return paramIndex\n  \n  const buildCondition = (condition) => {\n    const field = condition.source\n    const normalizedCondition = normalizeInOperand(condition.operand, condition.destination)\n    if (normalizedCondition === null) return null\n    const value = normalizedCondition.value\n    const operand = normalizedCondition.operand\n    \n    // The products table's virtual fields (effective price, rating bucket,\n    // on-sale flag, variant axes) are whole clauses, not columns - so they are\n    // answered before any branch below can interpolate the field name raw.\n    const productClause = productFilterClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (productClause !== null) return productClause\n    assertRequestColumn(field, 'filter field')\n    \n    if (Array.isArray(value)) {\n      if (value.length === 0) return null\n      if (operand === 'array_overlap') {\n        // The row's list (see array-overlap-sql.ts) shares any value with the set.\n        const clause = arrayOverlapSql([field], '$' + paramIndex)\n        queryParams.push(value.map((entry) => String(entry)))\n        paramIndex++\n        return clause\n      }\n      const placeholders = value.map(() => `$${paramIndex++}`)\n      queryParams.push(...value)\n      return operand === '!='\n        ? `${field} NOT IN (${placeholders.join(', ')})`\n        : `${field} IN (${placeholders.join(', ')})`\n    }\n    \n    if (operand === 'array_overlap') {\n      if (value === '' || value === null || value === undefined) return null\n      // A single comma-joined string (the multi-select Category Filter's\n      // ?categoryFilter=a,b,c) expands to multiple ids; one id stays one.\n      const overlapValues = String(value).split(',').map((entry) => entry.trim()).filter(Boolean)\n      if (overlapValues.length === 0) return null\n      const clause = arrayOverlapSql([field], '$' + paramIndex)\n      queryParams.push(overlapValues)\n      paramIndex++\n      return clause\n    }\n    \n    if (value === null) {\n      if (operand === '=') return `${field} IS NULL`\n      if (operand === '!=') return `${field} IS NOT NULL`\n      return null\n    }\n    \n    const validOps = ['=', '!=', '>', '<', '>=', '<=']\n    const sqlOperator = validOps.includes(operand) ? operand : '='\n    const clause = `${field} ${sqlOperator} $${paramIndex}`\n    queryParams.push(value)\n    paramIndex++\n    return clause\n  }\n  \n  const clause = buildFilterTreeClause(filterTree, buildCondition)\n  if (clause) conditions.push(clause)\n  \n  return paramIndex\n}\n\n").concat((0, utils_1.generateDateFormatterCode)(), "\n\n").concat((0, product_price_sort_1.generateSortFieldSqlHelper)(tableName), "\n\n").concat((0, product_price_sort_1.generateSortFallbackFieldHelper)(tableName), "\n\n").concat((0, row_order_1.generateRowOrderTiebreakHelper)((0, row_order_1.rowIdentityColumn)(config, tableName)), "\n\n").concat((0, product_filter_fields_1.generateProductFilterClauseHelper)(tableName), "\n\nexport default async function handler(req, res) {\n").concat((0, table_access_guard_1.generateReadGuardCall)(tableName, null), "\n  const client = getClient()\n  \n  try {\n    await client.connect()\n    ").concat(schema ? "await client.query('SET search_path TO ".concat(schema, "')") : '', "\n    \n    const { query, queryColumns, limit, page, perPage, sortBy, sortOrder, filters, sorts, offset } = req.query\n    // A visitor never filters, sorts or searches by a column it is not served.\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    \n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    \n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        // Use specified columns. Wrap non-arrays so that a single\n        // column passed as a bare string doesn't get iterated as chars.\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : (parsed ? [parsed] : [])\n      } else {\n        // Fallback: Get all columns from information_schema\n        try {\n          const schemaQuery = `\n            SELECT column_name\n            FROM information_schema.columns\n            WHERE table_name = $1\n            ").concat(schema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = schema \n            ? [").concat(JSON.stringify(tableName), ", ").concat(JSON.stringify(schema), "]\n            : [").concat(JSON.stringify(tableName), "]\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          columns = schemaResult.rows.map(row => row.column_name)\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n          // Continue without search if we can't get columns\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      if (columns.length > 0) {\n        const pattern = '%' + escapeLikePattern(query) + '%'\n        const placeholder = '$' + paramIndex\n        paramIndex++\n        queryParams.push(pattern)\n        const searchConditions = columns.map(\n          (col) => '\"' + sanitizeSearchIdentifier(col) + '\"::text ILIKE ' + placeholder + \" ESCAPE '|'\"\n        )\n        conditions.push('(' + searchConditions.join(' OR ') + ')')\n      }\n    }\n\n    // Apply filters using helper function\n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n    \n    let sql = `SELECT * FROM \"").concat(tableName, "\"`\n    \n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`\n    }\n    \n    // Handle sorts - new array format. Two ORDER BY clauses are built: the one\n    // actually used (the products table's price rewrites, rows without a value\n    // last), and a plain-column twin kept only as the fallback below.\n    let orderBySql = ''\n    let plainOrderBySql = ''\n    if (sorts) {\n      const parsedSorts = safeJSONParse(sorts)\n      if (Array.isArray(parsedSorts) && parsedSorts.length > 0) {\n        const valid = parsedSorts.filter((sort) => sort && sort.field)\n        valid.forEach((sort) => assertRequestColumn(sort.field, 'sort field'))\n        const orderOf = (sort) => (sort.order || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n        const orderClauses = valid.map((sort) => `${sortFieldSql(sort.field)} ${orderOf(sort)}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "`)\n        const plainClauses = valid.map((sort) => `${sortFallbackField(sort.field)} ${orderOf(sort)}`)\n\n        if (orderClauses.length > 0) {\n          // The row's own key last, so equal rows can't repeat across pages\n          // or vanish between them.\n          const tiebreak = rowOrderTiebreak(valid.map((sort) => sort.field), orderOf(valid[valid.length - 1]))\n          orderBySql = ` ORDER BY ${orderClauses.join(', ')}${tiebreak}`\n          plainOrderBySql = ` ORDER BY ${plainClauses.join(', ')}${tiebreak}`\n        }\n      }\n    } else if (sortBy) {\n      assertRequestColumn(sortBy, 'sort field')\n      const sortByDirection = (sortOrder || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n      const tiebreak = rowOrderTiebreak([sortBy], sortByDirection)\n      orderBySql = ` ORDER BY ${sortBy} ${sortByDirection}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "${tiebreak}`\n      plainOrderBySql = ` ORDER BY ${sortBy} ${sortByDirection}${tiebreak}`\n    }\n    const usedRewrittenSort = orderBySql !== plainOrderBySql\n\n    const limitValue = requestRowCount(limit || perPage)\n    const offsetValue = offset !== undefined ? parseInt(offset) : (page && perPage ? (parseInt(page) - 1) * parseInt(perPage) : undefined)\n\n    let sqlTail = ''\n    if (limitValue !== undefined) {\n      sqlTail += ` LIMIT ${limitValue}`\n    }\n    \n    if (offsetValue !== undefined) {\n      sqlTail += ` OFFSET ${offsetValue}`\n    }\n\n    const baseSql = sql\n    sql = baseSql + orderBySql + sqlTail\n    \n    // The discount-aware price ordering is an inline sub-select over a JSON\n    // column. It is written to be unraisable, but it runs inside ORDER BY for\n    // the whole table \u2014 so if a database ever rejects it, fall back to ordering\n    // by the stored list price rather than serving an empty products page. The\n    // empty-values-last ordering takes the same exit, for a Postgres-compatible\n    // database that does not know NULLS LAST.\n    let result\n    try {\n      result = await client.query(sql, queryParams)\n    } catch (sortError) {\n      if (!usedRewrittenSort) throw sortError\n      console.warn(\n        'Rewritten sort failed; falling back to the plain column:',\n        sortError && sortError.message\n      )\n      result = await client.query(baseSql + plainOrderBySql + sqlTail, queryParams)\n    }\n    const rows = Array.isArray(result?.rows) ? result.rows : []\n    const plainRows = rows.map((row) =>\n      row && typeof row.toJSON === 'function' ? row.toJSON() : row\n    )\n    const safeData = JSON.parse(JSON.stringify(plainRows, dateReplacer))\n\n    return res.status(200).json({\n      success: true,\n      data: __taWithoutCredentials(\n        __rowPolicy ? __brpStripHidden(__rowPolicy, safeData) : safeData,\n        ").concat(JSON.stringify(tableName), "\n      ),\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('PostgreSQL fetch error:', error)\n    // A database error names tables, columns and values: it stays in the server\n    // log. Only an error this route raised for the caller (it carries a status)\n    // is repeated to it.\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to fetch data',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing PostgreSQL client:', error)\n      }\n    }\n  }\n}\n");
 };
 exports.generatePostgreSQLFetcher = generatePostgreSQLFetcher;
 var generatePostgreSQLCountFetcher = function (config, tableName) {

package/dist/cjs/fetchers/postgresql.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgresql.js","sourceRoot":"","sources":["../../../src/fetchers/postgresql.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,4DAAmG;AACnG,0CAAgF;AAChF,kEAA4E;AAC5E,iEAA+F;AAC/F,iEAAyE;AACzE,0DAAkE;AAe3D,IAAM,yBAAyB,GAAG,UACvC,MAA+B,EAC/B,SAAiB,EACjB,kBAA8C;;IAA9C,mCAAA,EAAA,uBAA8C;IAE9C,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA;IAEvC,IAAM,YAAY,GAAG,QAAQ,CAAC,gBAAgB;QAC5C,CAAC,CAAC,mCACkB,IAAA,8BAAsB,EAAC,QAAQ,CAAC,gBAAgB,CAAC,WACrE;QACA,CAAC,CAAC,uBACM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAC7B,QAAQ,CAAC,IAAI,IAAI,IAAI,0BACrB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,8BAC9C,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC,8BACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,yBAE3C,QAAQ,CAAC,GAAG,KAAK,KAAK;YACpB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,QAAQ,CAAC,SAAS;gBACpB,CAAC,CAAC,mBACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACpF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,6CAEzF;gBACE,CAAC,CAAC,+BAA+B,UAErC,CAAA;IAEF,OAAO,yCAEP,IAAA,gDAA2B,EAAC,kBAAkB,CAAC,gEAG3B,YAAY,qBAGhC,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA2B,GAAE,wKAI7B,IAAA,iDAA4B,GAAE,+xFAwE9B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,+CAA0B,EAAC,SAAS,CAAC,iBAErC,IAAA,oDAA+B,EAAC,SAAS,CAAC,iBAE1C,IAAA,0CAA8B,EAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,iBAEpE,IAAA,yDAAiC,EAAC,SAAS,CAAC,oEAG5C,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,0FAKlC,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,88BAyB1D,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,0HAIlC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,+BACpD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,soCA2BT,SAAS,i0GA2EhC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,irBAwBlC,CAAA;AACD,CAAC,CAAA;AAtSY,QAAA,yBAAyB,6BAsSrC;AAEM,IAAM,8BAA8B,GAAG,UAC5C,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA,CAAA;IAE5C,OAAO,iDAEP,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,gwBAyB1B,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAI1C,SAAS;QACP,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,MAAG;QAC/E,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,yqCA8BH,SAAS,8wBA8BrD,CAAA;AACD,CAAC,CAAA;AArGY,QAAA,8BAA8B,kCAqG1C"}
+{"version":3,"file":"postgresql.js","sourceRoot":"","sources":["../../../src/fetchers/postgresql.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,4DAAmG;AACnG,sDAAwD;AACxD,0CAAgF;AAChF,kEAA4E;AAC5E,iEAA+F;AAC/F,iEAAyE;AACzE,0DAAkE;AAClE,uDAAqD;AAe9C,IAAM,yBAAyB,GAAG,UACvC,MAA+B,EAC/B,SAAiB,EACjB,kBAA8C;;IAA9C,mCAAA,EAAA,uBAA8C;IAE9C,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA;IAEvC,IAAM,YAAY,GAAG,QAAQ,CAAC,gBAAgB;QAC5C,CAAC,CAAC,mCACkB,IAAA,8BAAsB,EAAC,QAAQ,CAAC,gBAAgB,CAAC,WACrE;QACA,CAAC,CAAC,uBACM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAC7B,QAAQ,CAAC,IAAI,IAAI,IAAI,0BACrB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,8BAC9C,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC,8BACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,yBAE3C,QAAQ,CAAC,GAAG,KAAK,KAAK;YACpB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,QAAQ,CAAC,SAAS;gBACpB,CAAC,CAAC,mBACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACpF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,6CAEzF;gBACE,CAAC,CAAC,+BAA+B,UAErC,CAAA;IAEF,OAAO,UAAG,mCAAgB,iBAE1B,IAAA,gDAA2B,EAAC,kBAAkB,CAAC,gEAG3B,YAAY,qBAGhC,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA2B,GAAE,wKAI7B,IAAA,iDAA4B,GAAE,+xFAwE9B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,+CAA0B,EAAC,SAAS,CAAC,iBAErC,IAAA,oDAA+B,EAAC,SAAS,CAAC,iBAE1C,IAAA,0CAA8B,EAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,iBAEpE,IAAA,yDAAiC,EAAC,SAAS,CAAC,oEAG5C,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,0FAKlC,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,88BAyB1D,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,0HAIlC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,+BACpD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,soCA2BT,SAAS,83BAiByD,qCAAmB,+1BAevD,qCAAmB,s4DA+CxE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,irBAwBlC,CAAA;AACD,CAAC,CAAA;AA1SY,QAAA,yBAAyB,6BA0SrC;AAEM,IAAM,8BAA8B,GAAG,UAC5C,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA,CAAA;IAE5C,OAAO,iDAEP,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,gwBAyB1B,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAI1C,SAAS;QACP,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,MAAG;QAC/E,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,yqCA8BH,SAAS,8wBA8BrD,CAAA;AACD,CAAC,CAAA;AArGY,QAAA,8BAA8B,kCAqG1C"}

package/dist/cjs/fetchers/raw-query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"raw-query.d.ts","sourceRoot":"","sources":["../../../src/fetchers/raw-query.ts"],"names":[],"mappings":"AA4BA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,SACxB,MAAM,eACA,MAAM,EAAE,KACpB,MA6IF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,UAC/B,MAAM;wBACU,MAAM;iBAAe,MAAM,EAAE;CAoCrD,CAAA"}
+{"version":3,"file":"raw-query.d.ts","sourceRoot":"","sources":["../../../src/fetchers/raw-query.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,SACxB,MAAM,eACA,MAAM,EAAE,KACpB,MA6IF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,UAC/B,MAAM;wBACU,MAAM;iBAAe,MAAM,EAAE;CAoCrD,CAAA"}

package/dist/cjs/fetchers/raw-query.js

@@ -12,6 +12,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseQueryTemplateVariables = exports.generateRawQueryFetcher = void 0;
 var teleport_shared_1 = require("@teleporthq/teleport-shared");
 var utils_1 = require("../utils");
+var pg_client_import_1 = require("./pg-client-import");
 var FORBIDDEN_KEYWORDS = ['CREATE', 'ALTER', 'DROP', 'TRUNCATE', 'RENAME', 'GRANT', 'REVOKE'];
 /** The param a `{{Current User.<field>}}` token becomes: `currentUser` + the field, capitalised. */
 var CURRENT_USER_PARAM_PREFIX = 'currentUser';
@@ -64,7 +65,7 @@ var generateRawQueryFetcher = function (config, query, paramFields) {
                 ? "{\n      ".concat(pgConfig.sslConfig.ca ? "ca: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.ca), ",") : '', "\n      ").concat(pgConfig.sslConfig.cert ? "cert: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.cert), ",") : '', "\n      ").concat(pgConfig.sslConfig.key ? "key: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.key), ",") : '', "\n      rejectUnauthorized: false\n    }")
                 : '{ rejectUnauthorized: false }'
             : 'false';
-    return "import { Client } from 'pg'\n\nconst FORBIDDEN_KEYWORDS = ".concat(JSON.stringify(FORBIDDEN_KEYWORDS), "\n").concat(sessionHelpers, "\nconst getClient = () => {\n  const connStr = process.env.TELEPORT_DB_CONNECTION_STRING\n  if (connStr) {\n    const sslEnv = process.env.TELEPORT_DB_SSL\n    const sslOpt = sslEnv === 'false' ? false : sslEnv === 'true' ? { rejectUnauthorized: false } : undefined\n    return new Client(Object.assign({ connectionString: connStr }, sslOpt !== undefined ? { ssl: sslOpt } : {}))\n  }\n  return new Client({\n    host: process.env.TELEPORT_DB_HOST || ").concat(JSON.stringify((_a = pgConfig.host) !== null && _a !== void 0 ? _a : null), ",\n    port: parseInt(process.env.TELEPORT_DB_PORT || '").concat(pgConfig.port || 5432, "', 10),\n    user: process.env.TELEPORT_DB_USER || ").concat(JSON.stringify((_c = (_b = pgConfig.user) !== null && _b !== void 0 ? _b : pgConfig.username) !== null && _c !== void 0 ? _c : null), ",\n    password: process.env.TELEPORT_DB_PASSWORD || ").concat((0, utils_1.replaceSecretReference)(pgConfig.password) !== 'undefined'
+    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\nconst FORBIDDEN_KEYWORDS = ").concat(JSON.stringify(FORBIDDEN_KEYWORDS), "\n").concat(sessionHelpers, "\nconst getClient = () => {\n  const connStr = process.env.TELEPORT_DB_CONNECTION_STRING\n  if (connStr) {\n    const sslEnv = process.env.TELEPORT_DB_SSL\n    const sslOpt = sslEnv === 'false' ? false : sslEnv === 'true' ? { rejectUnauthorized: false } : undefined\n    return new Client(Object.assign({ connectionString: connStr }, sslOpt !== undefined ? { ssl: sslOpt } : {}))\n  }\n  return new Client({\n    host: process.env.TELEPORT_DB_HOST || ").concat(JSON.stringify((_a = pgConfig.host) !== null && _a !== void 0 ? _a : null), ",\n    port: parseInt(process.env.TELEPORT_DB_PORT || '").concat(pgConfig.port || 5432, "', 10),\n    user: process.env.TELEPORT_DB_USER || ").concat(JSON.stringify((_c = (_b = pgConfig.user) !== null && _b !== void 0 ? _b : pgConfig.username) !== null && _c !== void 0 ? _c : null), ",\n    password: process.env.TELEPORT_DB_PASSWORD || ").concat((0, utils_1.replaceSecretReference)(pgConfig.password) !== 'undefined'
         ? (0, utils_1.replaceSecretReference)(pgConfig.password)
         : 'null', ",\n    database: process.env.TELEPORT_DB_NAME || ").concat(JSON.stringify((_d = pgConfig.database) !== null && _d !== void 0 ? _d : null), ",\n    ssl: ").concat(sslValue, "\n  })\n}\n\nconst validateQuery = (query) => {\n  const trimmed = query.trim().toUpperCase()\n  for (const keyword of FORBIDDEN_KEYWORDS) {\n    if (trimmed.startsWith(keyword)) {\n      return false\n    }\n  }\n  return true\n}\n\nexport default async function handler(req, res) {\n  try {\n    ").concat(paramDestructure, "\n    ").concat(paramValidation, "\n\n    const query = ").concat(JSON.stringify(query), "\n\n    if (!validateQuery(query)) {\n      return res.status(400).json({\n        success: false,\n        error: 'Only SELECT queries are allowed',\n        timestamp: Date.now()\n      })\n    }\n\n    const client = getClient()\n    await client.connect()\n\n    try {\n      const result = await client.query(query, ").concat(paramArray, ")\n\n      return res.status(200).json({\n        success: true,\n        data: result.rows,\n        timestamp: Date.now()\n      })\n    } finally {\n      await client.end()\n    }\n  } catch (error) {\n    // A database error names tables, columns and values: server log only.\n    console.error('Raw query fetch error:', error)\n    return res.status(500).json({\n      success: false,\n      error: 'Failed to fetch data',\n      timestamp: Date.now()\n    })\n  }\n}\n");
 };

package/dist/cjs/fetchers/raw-query.js.map

@@ -1 +1 @@
-{"version":3,"file":"raw-query.js","sourceRoot":"","sources":["../../../src/fetchers/raw-query.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+DAAmE;AACnE,kCAAiD;AAajD,IAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;AAE/F,oGAAoG;AACpG,IAAM,yBAAyB,GAAG,aAAa,CAAA;AAE/C,IAAM,kBAAkB,GAAG,UAAC,KAAa;IACvC,OAAA,KAAK,CAAC,MAAM,GAAG,yBAAyB,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,CAAC;AAAjG,CAAiG,CAAA;AAEnG,uFAAuF;AACvF,IAAM,gBAAgB,GAAG,UAAC,KAAa;IACrC,IAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACI,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,KAAa,EACb,WAAqB;;IAErB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACzD,IAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,UAAC,KAAK,IAAK,OAAA,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAA1B,CAA0B,CAAC,CAAA;IAE/E,IAAM,gBAAgB,GAAG;QACvB,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAW,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAgB,CAAC,CAAC,CAAC,EAAE;QACnF,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,EAAE;OACxE,UAAU,CAAC,GAAG,CACf,UAAC,KAAK;QACJ,OAAA,gBAAS,KAAK,gDAAsC,IAAI,CAAC,SAAS,CAChE,gBAAgB,CAAC,KAAK,CAAC,CACxB,MAAG;IAFJ,CAEI,CACP,QAEA,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,QAAQ,CAAC,CAAA;IAEjB,IAAM,cAAc,GAClB,UAAU,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,UAAG,uCAAqB,CAAC,wCAAwC,EAAE,wjBAiB1E;QACK,CAAC,CAAC,EAAE,CAAA;IAER,IAAM,eAAe,GACnB,WAAW,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,oBACE,WAAW,CAAC,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,WAAI,CAAC,CAAE,EAAP,CAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sGAEhD;QACA,CAAC,CAAC,EAAE,CAAA;IAER,IAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAEhF,IAAM,QAAQ,GACZ,QAAQ,CAAC,GAAG,KAAK,KAAK;QACpB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS;YAC7C,CAAC,CAAC,QAAQ,CAAC,SAAS;gBAClB,CAAC,CAAC,mBACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACpF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,6CAEzF;gBACE,CAAC,CAAC,+BAA+B;YACnC,CAAC,CAAC,OAAO,CAAA;IAEb,OAAO,oEAEoB,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAC7D,cAAc,gdAS4B,IAAI,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,IAAI,mCAAI,IAAI,CAAC,oEAC3B,QAAQ,CAAC,IAAI,IAAI,IAAI,gEAC/B,IAAI,CAAC,SAAS,CACpD,MAAA,MAAA,QAAQ,CAAC,IAAI,mCAAI,QAAQ,CAAC,QAAQ,mCAAI,IAAI,CAC3C,kEAEC,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,WAAW;QACvD,CAAC,CAAC,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,CAAC,CAAC,MAAM,8DAEgC,IAAI,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,QAAQ,mCAAI,IAAI,CAAC,yBAC9E,QAAQ,uTAgBb,gBAAgB,mBAChB,eAAe,mCAED,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,8UAcQ,UAAU,geAoB1D,CAAA;AACD,CAAC,CAAA;AAjJY,QAAA,uBAAuB,2BAiJnC;AAED;;;GAGG;AACI,IAAM,2BAA2B,GAAG,UACzC,KAAa;IAEb,IAAM,SAAS,GAAG,8BAA8B,CAAA;IAChD,IAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,6CAA6C;IAC7C,IAAM,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,KAAK,KAAK,IAAI,EAAE;QACrB,IAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAChC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;SACxB;QACD,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;KAC3B;IAED,qDAAqD;IACrD,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC3C,IAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC5B,kEAAkE;QAClE,IAAM,aAAa,GAAG,0BAAmB,KAAK,QAAK,CAAA;QACnD,IAAM,eAAe,GAAG,yBAAkB,KAAK,OAAI,CAAA;QAEnD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;YAC9C,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,WAAI,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;SAC/E;aAAM;YACL,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,WAAI,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;SACjF;KACF;IAED,qDAAqD;IACrD,IAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CACrC,UAAC,CAAC,IAAK,OAAA,qBAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,EAAtD,CAAsD,CAC9D,CAAA;IAED,OAAO,EAAE,kBAAkB,oBAAA,EAAE,WAAW,EAAE,eAAe,EAAE,CAAA;AAC7D,CAAC,CAAA;AAtCY,QAAA,2BAA2B,+BAsCvC"}
+{"version":3,"file":"raw-query.js","sourceRoot":"","sources":["../../../src/fetchers/raw-query.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+DAAmE;AACnE,kCAAiD;AACjD,uDAAqD;AAarD,IAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;AAE/F,oGAAoG;AACpG,IAAM,yBAAyB,GAAG,aAAa,CAAA;AAE/C,IAAM,kBAAkB,GAAG,UAAC,KAAa;IACvC,OAAA,KAAK,CAAC,MAAM,GAAG,yBAAyB,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,CAAC;AAAjG,CAAiG,CAAA;AAEnG,uFAAuF;AACvF,IAAM,gBAAgB,GAAG,UAAC,KAAa;IACrC,IAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACI,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,KAAa,EACb,WAAqB;;IAErB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACzD,IAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,UAAC,KAAK,IAAK,OAAA,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAA1B,CAA0B,CAAC,CAAA;IAE/E,IAAM,gBAAgB,GAAG;QACvB,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAW,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAgB,CAAC,CAAC,CAAC,EAAE;QACnF,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,EAAE;OACxE,UAAU,CAAC,GAAG,CACf,UAAC,KAAK;QACJ,OAAA,gBAAS,KAAK,gDAAsC,IAAI,CAAC,SAAS,CAChE,gBAAgB,CAAC,KAAK,CAAC,CACxB,MAAG;IAFJ,CAEI,CACP,QAEA,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,QAAQ,CAAC,CAAA;IAEjB,IAAM,cAAc,GAClB,UAAU,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,UAAG,uCAAqB,CAAC,wCAAwC,EAAE,wjBAiB1E;QACK,CAAC,CAAC,EAAE,CAAA;IAER,IAAM,eAAe,GACnB,WAAW,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,oBACE,WAAW,CAAC,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,WAAI,CAAC,CAAE,EAAP,CAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sGAEhD;QACA,CAAC,CAAC,EAAE,CAAA;IAER,IAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAEhF,IAAM,QAAQ,GACZ,QAAQ,CAAC,GAAG,KAAK,KAAK;QACpB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS;YAC7C,CAAC,CAAC,QAAQ,CAAC,SAAS;gBAClB,CAAC,CAAC,mBACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACpF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,6CAEzF;gBACE,CAAC,CAAC,+BAA+B;YACnC,CAAC,CAAC,OAAO,CAAA;IAEb,OAAO,UAAG,mCAAgB,4CAEC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAC7D,cAAc,gdAS4B,IAAI,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,IAAI,mCAAI,IAAI,CAAC,oEAC3B,QAAQ,CAAC,IAAI,IAAI,IAAI,gEAC/B,IAAI,CAAC,SAAS,CACpD,MAAA,MAAA,QAAQ,CAAC,IAAI,mCAAI,QAAQ,CAAC,QAAQ,mCAAI,IAAI,CAC3C,kEAEC,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,WAAW;QACvD,CAAC,CAAC,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,CAAC,CAAC,MAAM,8DAEgC,IAAI,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,QAAQ,mCAAI,IAAI,CAAC,yBAC9E,QAAQ,uTAgBb,gBAAgB,mBAChB,eAAe,mCAED,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,8UAcQ,UAAU,geAoB1D,CAAA;AACD,CAAC,CAAA;AAjJY,QAAA,uBAAuB,2BAiJnC;AAED;;;GAGG;AACI,IAAM,2BAA2B,GAAG,UACzC,KAAa;IAEb,IAAM,SAAS,GAAG,8BAA8B,CAAA;IAChD,IAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,6CAA6C;IAC7C,IAAM,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,KAAK,KAAK,IAAI,EAAE;QACrB,IAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAChC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;SACxB;QACD,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;KAC3B;IAED,qDAAqD;IACrD,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC3C,IAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC5B,kEAAkE;QAClE,IAAM,aAAa,GAAG,0BAAmB,KAAK,QAAK,CAAA;QACnD,IAAM,eAAe,GAAG,yBAAkB,KAAK,OAAI,CAAA;QAEnD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;YAC9C,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,WAAI,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;SAC/E;aAAM;YACL,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,WAAI,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;SACjF;KACF;IAED,qDAAqD;IACrD,IAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CACrC,UAAC,CAAC,IAAK,OAAA,qBAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,EAAtD,CAAsD,CAC9D,CAAA;IAED,OAAO,EAAE,kBAAkB,oBAAA,EAAE,WAAW,EAAE,eAAe,EAAE,CAAA;AAC7D,CAAC,CAAA;AAtCY,QAAA,2BAA2B,+BAsCvC"}

package/dist/cjs/fetchers/teleport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"teleport.d.ts","sourceRoot":"","sources":["../../../src/fetchers/teleport.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAA;AAwC3B,eAAO,MAAM,sBAAsB,WACzB,OAAO,MAAM,EAAE,OAAO,CAAC,KAC9B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAMpC,CAAA;AAED,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,qBACC,sBAAsB,KACvC,MA0bF,CAAA;AAED,eAAO,MAAM,4BAA4B,WAC/B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MA8FF,CAAA"}
+{"version":3,"file":"teleport.d.ts","sourceRoot":"","sources":["../../../src/fetchers/teleport.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAA;AA0C3B,eAAO,MAAM,sBAAsB,WACzB,OAAO,MAAM,EAAE,OAAO,CAAC,KAC9B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAMpC,CAAA;AAED,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,qBACC,sBAAsB,KACvC,MAicF,CAAA;AAED,eAAO,MAAM,4BAA4B,WAC/B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MA8FF,CAAA"}

package/dist/cjs/fetchers/teleport.js

@@ -4,6 +4,7 @@ exports.generateTeleportCountFetcher = exports.generateTeleportFetcher = exports
 var utils_1 = require("../utils");
 var transformations_1 = require("../transformations");
 var product_price_sort_1 = require("../product-price-sort");
+var list_sort_order_1 = require("../list-sort-order");
 var row_order_1 = require("../row-order");
 var product_filter_fields_1 = require("../product-filter-fields");
 var localized_columns_1 = require("../localized-columns");
@@ -11,6 +12,7 @@ var request_locale_1 = require("../request-locale");
 var table_access_guard_1 = require("./utils/table-access-guard");
 var request_sql_guards_1 = require("./utils/request-sql-guards");
 var array_overlap_sql_1 = require("../array-overlap-sql");
+var pg_client_import_1 = require("./pg-client-import");
 var DEFAULT_ENV_KEYS = {
     host: 'TELEPORT_DB_HOST',
     port: 'TELEPORT_DB_PORT',
@@ -57,9 +59,9 @@ var generateTeleportFetcher = function (config, tableName, transformOptions) {
                 ? "key: ".concat(resolveEnvReference(dbConfig.sslConfig.key, 'TELEPORT_DB_SSL_KEY'), ",")
                 : '', "\n      rejectUnauthorized: false\n    }")
             : "(process.env.".concat(DEFAULT_ENV_KEYS.ssl, " === 'false' ? false : process.env.").concat(DEFAULT_ENV_KEYS.ssl, " === 'true' ? { rejectUnauthorized: false } : undefined)");
-    return "import { Client } from 'pg'\n\n".concat((0, table_access_guard_1.generateTableAccessPreamble)(transformOptions.trustedReaderRoles || []), "\nfunction normalizePostgresConnectionString(connectionString) {\n  if (!connectionString || typeof connectionString !== 'string') return connectionString;\n  if (/^postgresql:\\/(?!\\/)/i.test(connectionString)) {\n    return connectionString.replace(/^postgresql:\\//i, 'postgresql://');\n  }\n  return connectionString;\n}\n\nfunction stripSslQueryParamsFromConnectionString(connectionString) {\n  if (!connectionString || typeof connectionString !== 'string') return connectionString;\n  try {\n    var u = new URL(connectionString.replace(/^postgresql:/i, 'postgres:'));\n    u.searchParams.delete('sslmode');\n    u.searchParams.delete('ssl');\n    u.searchParams.delete('sslrootcert');\n    u.searchParams.delete('sslcert');\n    u.searchParams.delete('sslkey');\n    return u.toString().replace(/^postgres:/i, 'postgresql:');\n  } catch (e) {\n    return connectionString;\n  }\n}\n\nconst getClient = () => {\n  var ssl = ").concat(sslCode, ";\n  var connStr = process.env.TELEPORT_DB_CONNECTION_STRING;\n  if (connStr) {\n    connStr = normalizePostgresConnectionString(connStr);\n  }\n  if (ssl === false && connStr) {\n    connStr = stripSslQueryParamsFromConnectionString(connStr);\n  }\n  if (connStr) {\n    return new Client(Object.assign(\n      { connectionString: connStr },\n      ssl !== undefined ? { ssl: ssl } : {}\n    ));\n  }\n  return new Client(Object.assign(\n    {\n      host: ").concat(hostRef, ",\n      port: parseInt(").concat(portRef, " || '5432', 10),\n      user: ").concat(userRef, ",\n      password: ").concat(passwordRef, ",\n      database: ").concat(databaseRef, ",\n    },\n    ssl !== undefined ? { ssl: ssl } : {}\n  ));\n}\n\n").concat((0, utils_1.generateSafeJSONParseCode)(), "\n\n").concat((0, utils_1.generateFilterTreeHelpersCode)(), "\n\n").concat((0, utils_1.generateSearchEscapeHelpersCode)(), "\n").concat((0, array_overlap_sql_1.generateArrayOverlapSqlCode)(), "\n").concat((0, transformations_1.getTransformationCode)(tableName, transformOptions), "\n").concat((0, transformations_1.getTransformWrapperCode)(tableName, transformOptions), "\n").concat((0, request_sql_guards_1.generateRequestSqlGuardsCode)(), "\nconst processFilters = (filters, conditions, queryParams, paramIndex) => {\n  if (!filters) return paramIndex\n  \n  const filterTree = normalizeFilterTree(safeJSONParse(filters))\n  if (!filterTree) return paramIndex\n  \n  const buildCondition = (condition) => {\n    const field = condition.source\n    const normalizedCondition = normalizeInOperand(condition.operand, condition.destination)\n    if (normalizedCondition === null) return null\n    const value = normalizedCondition.value\n    const operand = normalizedCondition.operand\n    \n    // The products table's virtual fields (effective price, rating bucket,\n    // on-sale flag, variant axes) are whole clauses, not columns - so they are\n    // answered before any branch below can interpolate the field name raw.\n    const productClause = productFilterClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (productClause !== null) return productClause\n\n    // A translatable column is compared against the value in every language,\n    // so a localized slug resolves under any locale - see localized-columns.ts.\n    const localizedClause = localizedEqualityClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (localizedClause !== null) return localizedClause\n    assertRequestColumn(field, 'filter field')\n    \n    if (Array.isArray(value)) {\n      if (value.length === 0) return null\n      if (operand === 'array_overlap') {\n        // The row's list (see array-overlap-sql.ts) shares any value with the set.\n        const clause = arrayOverlapSql((localizedColumnList(field) || [field]), '$' + paramIndex)\n        queryParams.push(value.map((entry) => String(entry)))\n        paramIndex++\n        return clause\n      }\n      const placeholders = value.map(() => `$${paramIndex++}`)\n      queryParams.push(...value)\n      return operand === '!='\n        ? `${field} NOT IN (${placeholders.join(', ')})`\n        : `${field} IN (${placeholders.join(', ')})`\n    }\n    \n    if (operand === 'array_overlap') {\n      if (value === '' || value === null || value === undefined) return null\n      // A single comma-joined string (the multi-select Category Filter's\n      // ?categoryFilter=a,b,c) expands to multiple ids; one id stays one.\n      const overlapValues = String(value).split(',').map((entry) => entry.trim()).filter(Boolean)\n      if (overlapValues.length === 0) return null\n      const clause = arrayOverlapSql((localizedColumnList(field) || [field]), '$' + paramIndex)\n      queryParams.push(overlapValues)\n      paramIndex++\n      return clause\n    }\n    \n    if (value === null) {\n      if (operand === '=') return `${field} IS NULL`\n      if (operand === '!=') return `${field} IS NOT NULL`\n      return null\n    }\n    \n    const validOps = ['=', '!=', '>', '<', '>=', '<=']\n    const sqlOperator = validOps.includes(operand) ? operand : '='\n    const clause = `${field} ${sqlOperator} $${paramIndex}`\n    queryParams.push(value)\n    paramIndex++\n    return clause\n  }\n  \n  const clause = buildFilterTreeClause(filterTree, buildCondition)\n  if (clause) conditions.push(clause)\n  \n  return paramIndex\n}\n\n").concat((0, utils_1.generateDateFormatterCode)(), "\n\n").concat((0, product_price_sort_1.generateSortFieldSqlHelper)(tableName), "\n\n").concat((0, product_price_sort_1.generateSortFallbackFieldHelper)(tableName), "\n\n").concat((0, row_order_1.generateRowOrderTiebreakHelper)((0, row_order_1.rowIdentityColumn)(config, tableName)), "\n\n").concat((0, product_filter_fields_1.generateProductFilterClauseHelper)(tableName), "\n\n").concat((0, localized_columns_1.generateLocalizedColumnsHelper)(localizedColumns), "\n\n// Matches DDL / dangerous statements the raw-query branch should refuse.\n// Keep this list conservative \u2014 anything destructive or schema-changing is\n// out of scope for a client-triggered fetch. SELECT and CTEs (WITH ...) are\n// the only shapes consumers legitimately need.\nconst BLOCKED_RAW_QUERY_PATTERNS = [\n  /\\bcreate\\s+(?:temporary\\s+|temp\\s+|unlogged\\s+|global\\s+|local\\s+)?table\\b/i,\n  /\\bcreate\\s+(?:unique\\s+)?index\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?(?:materialized\\s+)?view\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?trigger\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?(?:aggregate\\s+)?function\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?procedure\\b/i,\n  /\\bcreate\\s+(?:database|schema|sequence|extension|type|role|user)\\b/i,\n  /\\bdrop\\s+(?:table|view|index|schema|database|sequence|trigger|function|procedure|role|user|extension|type|materialized)\\b/i,\n  /\\balter\\s+(?:table|view|index|schema|database|sequence|role|user|system)\\b/i,\n  /\\btruncate\\b/i,\n  /\\bgrant\\b/i,\n  /\\brevoke\\b/i,\n  /\\binsert\\b/i,\n  /\\bupdate\\b/i,\n  /\\bdelete\\b/i,\n  /\\bcopy\\b/i,\n  /\\bvacuum\\b/i,\n  /\\breindex\\b/i,\n  /\\bcluster\\b/i,\n]\n\nfunction assertRawQuerySafe(rawQuery) {\n  if (typeof rawQuery !== 'string' || rawQuery.length === 0) {\n    throw new Error('rawQuery must be a non-empty string')\n  }\n  // Reject multi-statement payloads \u2014 only single SELECT / WITH statements.\n  // A trailing semicolon is tolerated but any content after it fails.\n  var trimmed = rawQuery.trim().replace(/;\\s*$/, '')\n  if (trimmed.indexOf(';') !== -1) {\n    throw new Error('rawQuery must contain exactly one statement')\n  }\n  for (var i = 0; i < BLOCKED_RAW_QUERY_PATTERNS.length; i++) {\n    if (BLOCKED_RAW_QUERY_PATTERNS[i].test(trimmed)) {\n      throw new Error('rawQuery contains a blocked statement')\n    }\n  }\n}\n\nexport default async function handler(req, res) {\n").concat((0, table_access_guard_1.generateReadGuardCall)(tableName, 'req.query && req.query.rawQuery'), "\n  const client = getClient()\n\n  try {\n    await client.connect()\n    ").concat(schema ? "await client.query('SET search_path TO ".concat(schema, "')") : '', "\n\n    // If the caller supplied a rawQuery, run it verbatim (after a safety\n    // guard). The schema-driven branch below builds `SELECT * FROM ").concat(tableName, "`\n    // with optional filters \u2014 it's the default read path and ignores\n    // rawQuery. Page-load workflows and other consumers that need a JOIN\n    // or a user-scoped filter pass their fully-rendered SQL here via\n    // `fetchData({ rawQuery })` and expect it to execute verbatim.\n    if (req.query && typeof req.query.rawQuery === 'string' && req.query.rawQuery.length > 0) {\n      assertRawQuerySafe(req.query.rawQuery)\n      const rawResult = await client.query(req.query.rawQuery)\n      const rawRows = Array.isArray(rawResult?.rows) ? rawResult.rows : []\n      const rawPlain = rawRows.map((row) =>\n        row && typeof row.toJSON === 'function' ? row.toJSON() : row\n      )\n      const rawSafe = JSON.parse(JSON.stringify(rawPlain, dateReplacer))\n      return res.status(200).json({\n        success: true,\n        // Every row here ends up in a browser (a page's props or a client\n        // refetch), so no credential column survives, whatever joined it.\n        data: __taWithoutCredentials(rawSafe, null),\n        timestamp: Date.now()\n      })\n    }\n\n    const { query, queryColumns, limit, page, perPage, sortBy, sortOrder, filters, sorts, offset } = req.query\n    // A visitor never filters, sorts or searches by a column it is not served.\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    // The language the page is in - what a translatable sort orders by.\n    const requestLocale = typeof req.query.").concat(request_locale_1.REQUEST_LOCALE_PARAM, " === 'string' ? req.query.").concat(request_locale_1.REQUEST_LOCALE_PARAM, " : null\n    \n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    \n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : (parsed ? [parsed] : [])\n      } else {\n        try {\n          const schemaQuery = `\n            SELECT column_name \n            FROM information_schema.columns \n            WHERE table_name = $1\n            ").concat(schema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = ").concat(schema
+    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\n").concat((0, table_access_guard_1.generateTableAccessPreamble)(transformOptions.trustedReaderRoles || []), "\nfunction normalizePostgresConnectionString(connectionString) {\n  if (!connectionString || typeof connectionString !== 'string') return connectionString;\n  if (/^postgresql:\\/(?!\\/)/i.test(connectionString)) {\n    return connectionString.replace(/^postgresql:\\//i, 'postgresql://');\n  }\n  return connectionString;\n}\n\nfunction stripSslQueryParamsFromConnectionString(connectionString) {\n  if (!connectionString || typeof connectionString !== 'string') return connectionString;\n  try {\n    var u = new URL(connectionString.replace(/^postgresql:/i, 'postgres:'));\n    u.searchParams.delete('sslmode');\n    u.searchParams.delete('ssl');\n    u.searchParams.delete('sslrootcert');\n    u.searchParams.delete('sslcert');\n    u.searchParams.delete('sslkey');\n    return u.toString().replace(/^postgres:/i, 'postgresql:');\n  } catch (e) {\n    return connectionString;\n  }\n}\n\nconst getClient = () => {\n  var ssl = ").concat(sslCode, ";\n  var connStr = process.env.TELEPORT_DB_CONNECTION_STRING;\n  if (connStr) {\n    connStr = normalizePostgresConnectionString(connStr);\n  }\n  if (ssl === false && connStr) {\n    connStr = stripSslQueryParamsFromConnectionString(connStr);\n  }\n  if (connStr) {\n    return new Client(Object.assign(\n      { connectionString: connStr },\n      ssl !== undefined ? { ssl: ssl } : {}\n    ));\n  }\n  return new Client(Object.assign(\n    {\n      host: ").concat(hostRef, ",\n      port: parseInt(").concat(portRef, " || '5432', 10),\n      user: ").concat(userRef, ",\n      password: ").concat(passwordRef, ",\n      database: ").concat(databaseRef, ",\n    },\n    ssl !== undefined ? { ssl: ssl } : {}\n  ));\n}\n\n").concat((0, utils_1.generateSafeJSONParseCode)(), "\n\n").concat((0, utils_1.generateFilterTreeHelpersCode)(), "\n\n").concat((0, utils_1.generateSearchEscapeHelpersCode)(), "\n").concat((0, array_overlap_sql_1.generateArrayOverlapSqlCode)(), "\n").concat((0, transformations_1.getTransformationCode)(tableName, transformOptions), "\n").concat((0, transformations_1.getTransformWrapperCode)(tableName, transformOptions), "\n").concat((0, request_sql_guards_1.generateRequestSqlGuardsCode)(), "\nconst processFilters = (filters, conditions, queryParams, paramIndex) => {\n  if (!filters) return paramIndex\n  \n  const filterTree = normalizeFilterTree(safeJSONParse(filters))\n  if (!filterTree) return paramIndex\n  \n  const buildCondition = (condition) => {\n    const field = condition.source\n    const normalizedCondition = normalizeInOperand(condition.operand, condition.destination)\n    if (normalizedCondition === null) return null\n    const value = normalizedCondition.value\n    const operand = normalizedCondition.operand\n    \n    // The products table's virtual fields (effective price, rating bucket,\n    // on-sale flag, variant axes) are whole clauses, not columns - so they are\n    // answered before any branch below can interpolate the field name raw.\n    const productClause = productFilterClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (productClause !== null) return productClause\n\n    // A translatable column is compared against the value in every language,\n    // so a localized slug resolves under any locale - see localized-columns.ts.\n    const localizedClause = localizedEqualityClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (localizedClause !== null) return localizedClause\n    assertRequestColumn(field, 'filter field')\n    \n    if (Array.isArray(value)) {\n      if (value.length === 0) return null\n      if (operand === 'array_overlap') {\n        // The row's list (see array-overlap-sql.ts) shares any value with the set.\n        const clause = arrayOverlapSql((localizedColumnList(field) || [field]), '$' + paramIndex)\n        queryParams.push(value.map((entry) => String(entry)))\n        paramIndex++\n        return clause\n      }\n      const placeholders = value.map(() => `$${paramIndex++}`)\n      queryParams.push(...value)\n      return operand === '!='\n        ? `${field} NOT IN (${placeholders.join(', ')})`\n        : `${field} IN (${placeholders.join(', ')})`\n    }\n    \n    if (operand === 'array_overlap') {\n      if (value === '' || value === null || value === undefined) return null\n      // A single comma-joined string (the multi-select Category Filter's\n      // ?categoryFilter=a,b,c) expands to multiple ids; one id stays one.\n      const overlapValues = String(value).split(',').map((entry) => entry.trim()).filter(Boolean)\n      if (overlapValues.length === 0) return null\n      const clause = arrayOverlapSql((localizedColumnList(field) || [field]), '$' + paramIndex)\n      queryParams.push(overlapValues)\n      paramIndex++\n      return clause\n    }\n    \n    if (value === null) {\n      if (operand === '=') return `${field} IS NULL`\n      if (operand === '!=') return `${field} IS NOT NULL`\n      return null\n    }\n    \n    const validOps = ['=', '!=', '>', '<', '>=', '<=']\n    const sqlOperator = validOps.includes(operand) ? operand : '='\n    const clause = `${field} ${sqlOperator} $${paramIndex}`\n    queryParams.push(value)\n    paramIndex++\n    return clause\n  }\n  \n  const clause = buildFilterTreeClause(filterTree, buildCondition)\n  if (clause) conditions.push(clause)\n  \n  return paramIndex\n}\n\n").concat((0, utils_1.generateDateFormatterCode)(), "\n\n").concat((0, product_price_sort_1.generateSortFieldSqlHelper)(tableName), "\n\n").concat((0, product_price_sort_1.generateSortFallbackFieldHelper)(tableName), "\n\n").concat((0, row_order_1.generateRowOrderTiebreakHelper)((0, row_order_1.rowIdentityColumn)(config, tableName)), "\n\n").concat((0, product_filter_fields_1.generateProductFilterClauseHelper)(tableName), "\n\n").concat((0, localized_columns_1.generateLocalizedColumnsHelper)(localizedColumns), "\n\n// Matches DDL / dangerous statements the raw-query branch should refuse.\n// Keep this list conservative \u2014 anything destructive or schema-changing is\n// out of scope for a client-triggered fetch. SELECT and CTEs (WITH ...) are\n// the only shapes consumers legitimately need.\nconst BLOCKED_RAW_QUERY_PATTERNS = [\n  /\\bcreate\\s+(?:temporary\\s+|temp\\s+|unlogged\\s+|global\\s+|local\\s+)?table\\b/i,\n  /\\bcreate\\s+(?:unique\\s+)?index\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?(?:materialized\\s+)?view\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?trigger\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?(?:aggregate\\s+)?function\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?procedure\\b/i,\n  /\\bcreate\\s+(?:database|schema|sequence|extension|type|role|user)\\b/i,\n  /\\bdrop\\s+(?:table|view|index|schema|database|sequence|trigger|function|procedure|role|user|extension|type|materialized)\\b/i,\n  /\\balter\\s+(?:table|view|index|schema|database|sequence|role|user|system)\\b/i,\n  /\\btruncate\\b/i,\n  /\\bgrant\\b/i,\n  /\\brevoke\\b/i,\n  /\\binsert\\b/i,\n  /\\bupdate\\b/i,\n  /\\bdelete\\b/i,\n  /\\bcopy\\b/i,\n  /\\bvacuum\\b/i,\n  /\\breindex\\b/i,\n  /\\bcluster\\b/i,\n]\n\nfunction assertRawQuerySafe(rawQuery) {\n  if (typeof rawQuery !== 'string' || rawQuery.length === 0) {\n    throw new Error('rawQuery must be a non-empty string')\n  }\n  // Reject multi-statement payloads \u2014 only single SELECT / WITH statements.\n  // A trailing semicolon is tolerated but any content after it fails.\n  var trimmed = rawQuery.trim().replace(/;\\s*$/, '')\n  if (trimmed.indexOf(';') !== -1) {\n    throw new Error('rawQuery must contain exactly one statement')\n  }\n  for (var i = 0; i < BLOCKED_RAW_QUERY_PATTERNS.length; i++) {\n    if (BLOCKED_RAW_QUERY_PATTERNS[i].test(trimmed)) {\n      throw new Error('rawQuery contains a blocked statement')\n    }\n  }\n}\n\nexport default async function handler(req, res) {\n").concat((0, table_access_guard_1.generateReadGuardCall)(tableName, 'req.query && req.query.rawQuery'), "\n  const client = getClient()\n\n  try {\n    await client.connect()\n    ").concat(schema ? "await client.query('SET search_path TO ".concat(schema, "')") : '', "\n\n    // If the caller supplied a rawQuery, run it verbatim (after a safety\n    // guard). The schema-driven branch below builds `SELECT * FROM ").concat(tableName, "`\n    // with optional filters \u2014 it's the default read path and ignores\n    // rawQuery. Page-load workflows and other consumers that need a JOIN\n    // or a user-scoped filter pass their fully-rendered SQL here via\n    // `fetchData({ rawQuery })` and expect it to execute verbatim.\n    if (req.query && typeof req.query.rawQuery === 'string' && req.query.rawQuery.length > 0) {\n      assertRawQuerySafe(req.query.rawQuery)\n      // A page's own statement, read for a visitor, runs over the rows a\n      // visitor is served of every narrowed table it names.\n      const rawSql = __rowAccess.narrowRaw ? __brpNarrowRawQuery(req.query.rawQuery) : req.query.rawQuery\n      const rawResult = await client.query(rawSql)\n      const rawRows = Array.isArray(rawResult?.rows) ? rawResult.rows : []\n      const rawPlain = rawRows.map((row) =>\n        row && typeof row.toJSON === 'function' ? row.toJSON() : row\n      )\n      const rawSafe = JSON.parse(JSON.stringify(rawPlain, dateReplacer))\n      return res.status(200).json({\n        success: true,\n        // Every row here ends up in a browser (a page's props or a client\n        // refetch), so no credential column survives, whatever joined it.\n        data: __taWithoutCredentials(\n          __rowAccess.narrowRaw ? __brpStripHiddenOfRaw(req.query.rawQuery, rawSafe) : rawSafe,\n          null\n        ),\n        timestamp: Date.now()\n      })\n    }\n\n    const { query, queryColumns, limit, page, perPage, sortBy, sortOrder, filters, sorts, offset } = req.query\n    // A visitor never filters, sorts or searches by a column it is not served.\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    // The language the page is in - what a translatable sort orders by.\n    const requestLocale = typeof req.query.").concat(request_locale_1.REQUEST_LOCALE_PARAM, " === 'string' ? req.query.").concat(request_locale_1.REQUEST_LOCALE_PARAM, " : null\n    \n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    \n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : (parsed ? [parsed] : [])\n      } else {\n        try {\n          const schemaQuery = `\n            SELECT column_name \n            FROM information_schema.columns \n            WHERE table_name = $1\n            ").concat(schema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = ").concat(schema
         ? "[".concat(JSON.stringify(tableName), ", ").concat(JSON.stringify(schema), "]")
-        : "[".concat(JSON.stringify(tableName), "]"), "\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          columns = schemaResult.rows.map(row => row.column_name)\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      if (columns.length > 0) {\n        const pattern = '%' + escapeLikePattern(query) + '%'\n        const placeholder = '$' + paramIndex\n        paramIndex++\n        queryParams.push(pattern)\n        const searchConditions = columns.map(\n          (col) => '\"' + sanitizeSearchIdentifier(col) + '\"::text ILIKE ' + placeholder + \" ESCAPE '|'\"\n        )\n        conditions.push('(' + searchConditions.join(' OR ') + ')')\n      }\n    }\n    \n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n    \n    let sql = `SELECT * FROM ").concat(tableName, "`\n    \n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`\n    }\n    \n    // Handle sorts - new array format. Two ORDER BY clauses are built: the one\n    // actually used (a translatable column in the request's language, the\n    // products table's price rewrites), and a plain-column twin kept only as\n    // the fallback below.\n    let orderBySql = ''\n    let plainOrderBySql = ''\n    if (sorts) {\n      const parsedSorts = safeJSONParse(sorts)\n      if (Array.isArray(parsedSorts) && parsedSorts.length > 0) {\n        const valid = parsedSorts.filter((sort) => sort && sort.field)\n        valid.forEach((sort) => assertRequestColumn(sort.field, 'sort field'))\n        const orderOf = (sort) => (sort.order || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n        const orderClauses = valid.map((sort) => `${localizedSortFieldSql(sort.field, requestLocale) || sortFieldSql(sort.field)} ${orderOf(sort)}`)\n        const plainClauses = valid.map((sort) => `${sortFallbackField(sort.field)} ${orderOf(sort)}`)\n\n        if (orderClauses.length > 0) {\n          // The row's own key last, so equal rows can't repeat across pages\n          // or vanish between them.\n          const tiebreak = rowOrderTiebreak(valid.map((sort) => sort.field), orderOf(valid[valid.length - 1]))\n          orderBySql = ` ORDER BY ${orderClauses.join(', ')}${tiebreak}`\n          plainOrderBySql = ` ORDER BY ${plainClauses.join(', ')}${tiebreak}`\n        }\n      }\n    } else if (sortBy) {\n      assertRequestColumn(sortBy, 'sort field')\n      const sortByDirection = (sortOrder || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n      const tiebreak = rowOrderTiebreak([sortBy], sortByDirection)\n      orderBySql = ` ORDER BY ${localizedSortFieldSql(sortBy, requestLocale) || sortBy} ${sortByDirection}${tiebreak}`\n      plainOrderBySql = ` ORDER BY ${sortBy} ${sortByDirection}${tiebreak}`\n    }\n    const usedDiscountAwareSort = orderBySql !== plainOrderBySql\n\n    const limitValue = requestRowCount(limit || perPage)\n    const offsetValue = offset !== undefined ? parseInt(offset) : (page && perPage ? (parseInt(page) - 1) * parseInt(perPage) : undefined)\n\n    let sqlTail = ''\n    if (limitValue !== undefined) {\n      sqlTail += ` LIMIT ${limitValue}`\n    }\n    \n    if (offsetValue !== undefined) {\n      sqlTail += ` OFFSET ${offsetValue}`\n    }\n\n    const baseSql = sql\n    sql = baseSql + orderBySql + sqlTail\n\n    // The discount-aware price ordering is an inline sub-select over a JSON\n    // column. It is written to be unraisable, but it runs inside ORDER BY for\n    // the whole table - so if a database ever rejects it, fall back to ordering\n    // by the stored list price rather than serving an empty products page. The\n    // translatable-column ordering takes the same exit: a per-language column\n    // the schema had at generation time may have been dropped since.\n    let result\n    try {\n      result = await client.query(sql, queryParams)\n    } catch (sortError) {\n      if (!usedDiscountAwareSort) throw sortError\n      console.warn(\n        'Rewritten sort failed; falling back to the plain column:',\n        sortError && sortError.message\n      )\n      result = await client.query(baseSql + plainOrderBySql + sqlTail, queryParams)\n    }\n    const rows = Array.isArray(result?.rows) ? result.rows : []\n    const plainRows = rows.map((row) =>\n      row && typeof row.toJSON === 'function' ? row.toJSON() : row\n    )\n    const safeData = JSON.parse(JSON.stringify(plainRows, dateReplacer))\n    ").concat((0, transformations_1.getTransformExpression)(tableName)
+        : "[".concat(JSON.stringify(tableName), "]"), "\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          columns = schemaResult.rows.map(row => row.column_name)\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      if (columns.length > 0) {\n        const pattern = '%' + escapeLikePattern(query) + '%'\n        const placeholder = '$' + paramIndex\n        paramIndex++\n        queryParams.push(pattern)\n        const searchConditions = columns.map(\n          (col) => '\"' + sanitizeSearchIdentifier(col) + '\"::text ILIKE ' + placeholder + \" ESCAPE '|'\"\n        )\n        conditions.push('(' + searchConditions.join(' OR ') + ')')\n      }\n    }\n    \n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n    \n    let sql = `SELECT * FROM ").concat(tableName, "`\n    \n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`\n    }\n    \n    // Handle sorts - new array format. Two ORDER BY clauses are built: the one\n    // actually used (a translatable column in the request's language, the\n    // products table's price rewrites, rows without a value last), and a\n    // plain-column twin kept only as the fallback below.\n    let orderBySql = ''\n    let plainOrderBySql = ''\n    if (sorts) {\n      const parsedSorts = safeJSONParse(sorts)\n      if (Array.isArray(parsedSorts) && parsedSorts.length > 0) {\n        const valid = parsedSorts.filter((sort) => sort && sort.field)\n        valid.forEach((sort) => assertRequestColumn(sort.field, 'sort field'))\n        const orderOf = (sort) => (sort.order || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n        const orderClauses = valid.map((sort) => `${localizedSortFieldSql(sort.field, requestLocale) || sortFieldSql(sort.field)} ${orderOf(sort)}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "`)\n        const plainClauses = valid.map((sort) => `${sortFallbackField(sort.field)} ${orderOf(sort)}`)\n\n        if (orderClauses.length > 0) {\n          // The row's own key last, so equal rows can't repeat across pages\n          // or vanish between them.\n          const tiebreak = rowOrderTiebreak(valid.map((sort) => sort.field), orderOf(valid[valid.length - 1]))\n          orderBySql = ` ORDER BY ${orderClauses.join(', ')}${tiebreak}`\n          plainOrderBySql = ` ORDER BY ${plainClauses.join(', ')}${tiebreak}`\n        }\n      }\n    } else if (sortBy) {\n      assertRequestColumn(sortBy, 'sort field')\n      const sortByDirection = (sortOrder || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n      const tiebreak = rowOrderTiebreak([sortBy], sortByDirection)\n      orderBySql = ` ORDER BY ${localizedSortFieldSql(sortBy, requestLocale) || sortBy} ${sortByDirection}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "${tiebreak}`\n      plainOrderBySql = ` ORDER BY ${sortBy} ${sortByDirection}${tiebreak}`\n    }\n    const usedRewrittenSort = orderBySql !== plainOrderBySql\n\n    const limitValue = requestRowCount(limit || perPage)\n    const offsetValue = offset !== undefined ? parseInt(offset) : (page && perPage ? (parseInt(page) - 1) * parseInt(perPage) : undefined)\n\n    let sqlTail = ''\n    if (limitValue !== undefined) {\n      sqlTail += ` LIMIT ${limitValue}`\n    }\n    \n    if (offsetValue !== undefined) {\n      sqlTail += ` OFFSET ${offsetValue}`\n    }\n\n    const baseSql = sql\n    sql = baseSql + orderBySql + sqlTail\n\n    // The discount-aware price ordering is an inline sub-select over a JSON\n    // column. It is written to be unraisable, but it runs inside ORDER BY for\n    // the whole table - so if a database ever rejects it, fall back to ordering\n    // by the stored list price rather than serving an empty products page. The\n    // translatable-column ordering takes the same exit: a per-language column\n    // the schema had at generation time may have been dropped since. So does\n    // the empty-values-last ordering.\n    let result\n    try {\n      result = await client.query(sql, queryParams)\n    } catch (sortError) {\n      if (!usedRewrittenSort) throw sortError\n      console.warn(\n        'Rewritten sort failed; falling back to the plain column:',\n        sortError && sortError.message\n      )\n      result = await client.query(baseSql + plainOrderBySql + sqlTail, queryParams)\n    }\n    const rows = Array.isArray(result?.rows) ? result.rows : []\n    const plainRows = rows.map((row) =>\n      row && typeof row.toJSON === 'function' ? row.toJSON() : row\n    )\n    const safeData = JSON.parse(JSON.stringify(plainRows, dateReplacer))\n    ").concat((0, transformations_1.getTransformExpression)(tableName)
         ? "const transformedData = ".concat((0, transformations_1.getTransformExpression)(tableName))
         : '', "\n\n    // Stamp each row with a globally-correct 1-based `__rowNumber` (the page\n    // offset is applied server-side above), so list index columns keep counting\n    // across pages instead of restarting at 1. Renderer-internal field \u2014 it is\n    // filtered from ordinary field bindings and only read by the index column.\n    const __finalData = ").concat((0, transformations_1.getTransformExpression)(tableName) ? 'transformedData' : 'safeData', "\n    const __rowNumberStart = (typeof offsetValue === 'number' && !isNaN(offsetValue)) ? offsetValue : 0\n    const __numberedData = Array.isArray(__finalData)\n      ? __finalData.map((__row, __i) =>\n          __row && typeof __row === 'object' && !Array.isArray(__row)\n            ? Object.assign({}, __row, { __rowNumber: __rowNumberStart + __i + 1 })\n            : __row)\n      : __finalData\n\n    return res.status(200).json({\n      success: true,\n      data: __taWithoutCredentials(\n        __rowPolicy ? __brpStripHidden(__rowPolicy, __numberedData) : __numberedData,\n        ").concat(JSON.stringify(tableName), "\n      ),\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('Teleport DB fetch error:', error)\n    // A database error names tables, columns and values: it stays in the server\n    // log. Only an error this route raised for the caller (it carries a status)\n    // is repeated to it.\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to fetch data',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing database client:', error)\n      }\n    }\n  }\n}\n");
 };

package/dist/cjs/fetchers/teleport.js.map

@@ -1 +1 @@
-{"version":3,"file":"teleport.js","sourceRoot":"","sources":["../../../src/fetchers/teleport.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,sDAK2B;AAC3B,4DAAmG;AACnG,0CAAgF;AAChF,kEAA4E;AAC5E,0DAA8F;AAC9F,oDAAwD;AACxD,iEAA+F;AAC/F,iEAAyE;AACzE,0DAAkE;AAgBlE,IAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,sBAAsB;IAChC,QAAQ,EAAE,kBAAkB;IAC5B,GAAG,EAAE,iBAAiB;CACvB,CAAA;AAED,IAAM,mBAAmB,GAAG,UAAC,KAAc,EAAE,aAAqB;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE;QACxE,OAAO,IAAA,8BAAsB,EAAC,KAAK,CAAC,CAAA;KACrC;IACD,OAAO,sBAAe,aAAa,CAAE,CAAA;AACvC,CAAC,CAAA;AAEM,IAAM,sBAAsB,GAAG,UACpC,MAA+B;IAE/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;KAClE;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC,CAAA;AARY,QAAA,sBAAsB,0BAQlC;AAEM,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,SAAiB,EACjB,gBAA6C;;IAA7C,iCAAA,EAAA,qBAA6C;IAE7C,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA;IACvC,IAAM,WAAW,GAAG,CAAC,CAAA,MAAA,MAAA,QAAQ,CAAC,cAAc,0CAAG,SAAS,CAAC,0CAAE,OAAO,KAAI,EAAE,CAAC;SACtE,GAAG,CAAC,UAAC,MAAM,IAAK,OAAA,MAAM,CAAC,IAAI,EAAX,CAAW,CAAC;SAC5B,MAAM,CAAC,UAAC,IAAI,IAAqB,OAAA,OAAO,IAAI,KAAK,QAAQ,EAAxB,CAAwB,CAAC,CAAA;IAC7D,IAAM,gBAAgB,GAAG,IAAA,2CAAuB,EAAC,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAA;IAE5F,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzE,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzE,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC9F,IAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACrF,IAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAErF,IAAM,OAAO,GACX,QAAQ,CAAC,GAAG,KAAK,KAAK;QACpB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ,CAAC,SAAS;YACpB,CAAC,CAAC,mBAEA,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACnB,CAAC,CAAC,cAAO,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,oBAAoB,CAAC,MAAG;gBAC5E,CAAC,CAAC,EAAE,qBAGN,QAAQ,CAAC,SAAS,CAAC,IAAI;gBACrB,CAAC,CAAC,gBAAS,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,sBAAsB,CAAC,MAAG;gBAClF,CAAC,CAAC,EAAE,qBAGN,QAAQ,CAAC,SAAS,CAAC,GAAG;gBACpB,CAAC,CAAC,eAAQ,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,qBAAqB,CAAC,MAAG;gBAC/E,CAAC,CAAC,EAAE,6CAGR;YACA,CAAC,CAAC,uBAAgB,gBAAgB,CAAC,GAAG,gDAAsC,gBAAgB,CAAC,GAAG,6DAA0D,CAAA;IAE9J,OAAO,yCAEP,IAAA,gDAA2B,EAAC,gBAAgB,CAAC,kBAAkB,IAAI,EAAE,CAAC,g7BAyB1D,OAAO,udAgBP,OAAO,qCACE,OAAO,2CAChB,OAAO,gCACH,WAAW,gCACX,WAAW,+EAM3B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA2B,GAAE,eAC7B,IAAA,uCAAqB,EAAC,SAAS,EAAE,gBAAgB,CAAC,eAClD,IAAA,yCAAuB,EAAC,SAAS,EAAE,gBAAgB,CAAC,eACpD,IAAA,iDAA4B,GAAE,6tGAgF9B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,+CAA0B,EAAC,SAAS,CAAC,iBAErC,IAAA,oDAA+B,EAAC,SAAS,CAAC,iBAE1C,IAAA,0CAA8B,EAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,iBAEpE,IAAA,yDAAiC,EAAC,SAAS,CAAC,iBAE5C,IAAA,kDAA8B,EAAC,gBAAgB,CAAC,g7DA8ChD,IAAA,0CAAqB,EAAC,SAAS,EAAE,iCAAiC,CAAC,wFAK/D,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,gKAGD,SAAS,88CA0BnC,qCAAoB,uCAA6B,qCAAoB,6fAkBpG,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAIvC,MAAM;QACJ,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAG;QAC7D,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,6hCA0BhB,SAAS,8iHA4EnC,IAAA,wCAAsB,EAAC,SAAS,CAAC;QAC/B,CAAC,CAAC,kCAA2B,IAAA,wCAAsB,EAAC,SAAS,CAAC,CAAE;QAChE,CAAC,CAAC,EAAE,iXAOc,IAAA,wCAAsB,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,8lBAalF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,grBAwBlC,CAAA;AACD,CAAC,CAAA;AA9bY,QAAA,uBAAuB,2BA8bnC;AAEM,IAAM,4BAA4B,GAAG,UAC1C,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA,CAAA;IAE5C,OAAO,iDAEP,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,gqBAuB1B,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAI1C,SAAS;QACP,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,MAAG;QAC/E,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,6jCA4BJ,SAAS,0wBA8BpD,CAAA;AACD,CAAC,CAAA;AAjGY,QAAA,4BAA4B,gCAiGxC"}
+{"version":3,"file":"teleport.js","sourceRoot":"","sources":["../../../src/fetchers/teleport.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,sDAK2B;AAC3B,4DAAmG;AACnG,sDAAwD;AACxD,0CAAgF;AAChF,kEAA4E;AAC5E,0DAA8F;AAC9F,oDAAwD;AACxD,iEAA+F;AAC/F,iEAAyE;AACzE,0DAAkE;AAClE,uDAAqD;AAgBrD,IAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,sBAAsB;IAChC,QAAQ,EAAE,kBAAkB;IAC5B,GAAG,EAAE,iBAAiB;CACvB,CAAA;AAED,IAAM,mBAAmB,GAAG,UAAC,KAAc,EAAE,aAAqB;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE;QACxE,OAAO,IAAA,8BAAsB,EAAC,KAAK,CAAC,CAAA;KACrC;IACD,OAAO,sBAAe,aAAa,CAAE,CAAA;AACvC,CAAC,CAAA;AAEM,IAAM,sBAAsB,GAAG,UACpC,MAA+B;IAE/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;KAClE;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC,CAAA;AARY,QAAA,sBAAsB,0BAQlC;AAEM,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,SAAiB,EACjB,gBAA6C;;IAA7C,iCAAA,EAAA,qBAA6C;IAE7C,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA;IACvC,IAAM,WAAW,GAAG,CAAC,CAAA,MAAA,MAAA,QAAQ,CAAC,cAAc,0CAAG,SAAS,CAAC,0CAAE,OAAO,KAAI,EAAE,CAAC;SACtE,GAAG,CAAC,UAAC,MAAM,IAAK,OAAA,MAAM,CAAC,IAAI,EAAX,CAAW,CAAC;SAC5B,MAAM,CAAC,UAAC,IAAI,IAAqB,OAAA,OAAO,IAAI,KAAK,QAAQ,EAAxB,CAAwB,CAAC,CAAA;IAC7D,IAAM,gBAAgB,GAAG,IAAA,2CAAuB,EAAC,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAA;IAE5F,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzE,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzE,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC9F,IAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACrF,IAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAErF,IAAM,OAAO,GACX,QAAQ,CAAC,GAAG,KAAK,KAAK;QACpB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ,CAAC,SAAS;YACpB,CAAC,CAAC,mBAEA,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACnB,CAAC,CAAC,cAAO,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,oBAAoB,CAAC,MAAG;gBAC5E,CAAC,CAAC,EAAE,qBAGN,QAAQ,CAAC,SAAS,CAAC,IAAI;gBACrB,CAAC,CAAC,gBAAS,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,sBAAsB,CAAC,MAAG;gBAClF,CAAC,CAAC,EAAE,qBAGN,QAAQ,CAAC,SAAS,CAAC,GAAG;gBACpB,CAAC,CAAC,eAAQ,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,qBAAqB,CAAC,MAAG;gBAC/E,CAAC,CAAC,EAAE,6CAGR;YACA,CAAC,CAAC,uBAAgB,gBAAgB,CAAC,GAAG,gDAAsC,gBAAgB,CAAC,GAAG,6DAA0D,CAAA;IAE9J,OAAO,UAAG,mCAAgB,iBAE1B,IAAA,gDAA2B,EAAC,gBAAgB,CAAC,kBAAkB,IAAI,EAAE,CAAC,g7BAyB1D,OAAO,udAgBP,OAAO,qCACE,OAAO,2CAChB,OAAO,gCACH,WAAW,gCACX,WAAW,+EAM3B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA2B,GAAE,eAC7B,IAAA,uCAAqB,EAAC,SAAS,EAAE,gBAAgB,CAAC,eAClD,IAAA,yCAAuB,EAAC,SAAS,EAAE,gBAAgB,CAAC,eACpD,IAAA,iDAA4B,GAAE,6tGAgF9B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,+CAA0B,EAAC,SAAS,CAAC,iBAErC,IAAA,oDAA+B,EAAC,SAAS,CAAC,iBAE1C,IAAA,0CAA8B,EAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,iBAEpE,IAAA,yDAAiC,EAAC,SAAS,CAAC,iBAE5C,IAAA,kDAA8B,EAAC,gBAAgB,CAAC,g7DA8ChD,IAAA,0CAAqB,EAAC,SAAS,EAAE,iCAAiC,CAAC,wFAK/D,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,gKAGD,SAAS,oyDAgCnC,qCAAoB,uCAA6B,qCAAoB,6fAkBpG,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAIvC,MAAM;QACJ,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAG;QAC7D,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,6hCA0BhB,SAAS,y+BAkB8G,qCAAmB,+4BAe3D,qCAAmB,mxDA4C5H,IAAA,wCAAsB,EAAC,SAAS,CAAC;QAC/B,CAAC,CAAC,kCAA2B,IAAA,wCAAsB,EAAC,SAAS,CAAC,CAAE;QAChE,CAAC,CAAC,EAAE,iXAOc,IAAA,wCAAsB,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,8lBAalF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,grBAwBlC,CAAA;AACD,CAAC,CAAA;AArcY,QAAA,uBAAuB,2BAqcnC;AAEM,IAAM,4BAA4B,GAAG,UAC1C,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA,CAAA;IAE5C,OAAO,iDAEP,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,gqBAuB1B,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAI1C,SAAS;QACP,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,MAAG;QAC/E,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,6jCA4BJ,SAAS,0wBA8BpD,CAAA;AACD,CAAC,CAAA;AAjGY,QAAA,4BAA4B,gCAiGxC"}

package/dist/cjs/fetchers/utils/browser-row-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-row-policy.d.ts","sourceRoot":"","sources":["../../../../src/fetchers/utils/browser-row-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAE3D;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAA;AAE7D;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CACxC,CAAA;AAEpC;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,QACnC,MA+HL,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,cACpB,MAAM,mBACA,cAAc,MAAM,CAAC,KACrC,OAUF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,cAC5B,MAAM,gBACH,MAAM,GAAG,IAAI,KAC1B,MASF,CAAA"}
+{"version":3,"file":"browser-row-policy.d.ts","sourceRoot":"","sources":["../../../../src/fetchers/utils/browser-row-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAe,MAAM,6BAA6B,CAAA;AAExE;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAA;AAE7D;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CACxC,CAAA;AAEpC;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,QACnC,MAyML,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,cACpB,MAAM,mBACA,cAAc,MAAM,CAAC,KACrC,OAUF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,4BAA4B,cAC5B,MAAM,gBACH,MAAM,GAAG,IAAI,KAC1B,MASF,CAAA"}

package/dist/cjs/fetchers/utils/browser-row-policy.js

@@ -16,7 +16,11 @@ exports.BROWSER_ROW_POLICIES = teleport_shared_1.ContentTables.VISITOR_ROW_POLIC
  * the table whole). Plus the helpers that apply a policy to a request and to
  * its rows.
  */
-var generateBrowserRowPolicyCode = function () { return "// GENERATED \u2014 see browser-row-policy.ts in teleport-plugin-next-data-source.\nvar __BRP_POLICIES = ".concat(JSON.stringify(exports.BROWSER_ROW_POLICIES), ";\n\n// Who is asking: the store's own server code and its administrators read every\n// row; anyone else is a visitor.\nasync function __brpReader(req) {\n  if (__taIsInternalRequest(req)) return { trusted: true };\n  var token = null;\n  try {\n    token = await __tqSessionToken(req);\n  } catch (e) {\n    token = null;\n  }\n  var role = token ? __taRoleOf(token) : null;\n  return { trusted: !!role && __TA_TRUSTED_READER_ROLES.indexOf(role) !== -1 };\n}\n\nfunction __brpMentionsAny(rawQuery, tables) {\n  for (var i = 0; i < tables.length; i++) {\n    if (__taSqlMentionsTable(rawQuery, tables[i])) return true;\n  }\n  return false;\n}\n\n// A raw statement cannot be narrowed, so a visitor's statement that names a\n// narrowed table is refused whole. The session is only decoded when the read\n// touches one of these tables.\nasync function __brpAccess(req, tableName, rawQuery) {\n  var raw = typeof rawQuery === 'string' && rawQuery.length > 0 ? rawQuery : null;\n  var bare = __taNormalizeTable(tableName);\n  var rawNarrowed = !!raw && __brpMentionsAny(raw, Object.keys(__BRP_POLICIES));\n  var policy = raw ? null : (Object.prototype.hasOwnProperty.call(__BRP_POLICIES, bare) ? __BRP_POLICIES[bare] : null);\n  if (!rawNarrowed && !policy) return { denied: null, policy: null };\n  var reader = await __brpReader(req);\n  if (reader.trusted) return { denied: null, policy: null };\n  if (rawNarrowed) {\n    return { denied: { status: 403, message: 'Forbidden: raw queries over this table are only available to server-side calls' }, policy: null };\n  }\n  return { denied: null, policy: policy };\n}\n\nfunction __brpColumnName(field) {\n  var parts = String(field == null ? '' : field).replace(/\"/g, '').trim().split('.');\n  return parts[parts.length - 1];\n}\n\nfunction __brpIsHidden(policy, field) {\n  var name = __brpColumnName(field).toLowerCase();\n  for (var i = 0; i < policy.hiddenColumns.length; i++) {\n    if (policy.hiddenColumns[i].toLowerCase() === name) return true;\n  }\n  return false;\n}\n\n// Every field a request filters, sorts or searches by, however deep a filter\n// group nests it. A condition's value is data, not a field.\nfunction __brpRequestFields(value, out) {\n  if (Array.isArray(value)) {\n    for (var i = 0; i < value.length; i++) __brpRequestFields(value[i], out);\n  } else if (value && typeof value === 'object') {\n    if (typeof value.source === 'string') out.push(value.source);\n    if (typeof value.field === 'string') out.push(value.field);\n    var keys = Object.keys(value);\n    for (var k = 0; k < keys.length; k++) {\n      if (keys[k] === 'destination' || keys[k] === 'value') continue;\n      if (value[keys[k]] && typeof value[keys[k]] === 'object') __brpRequestFields(value[keys[k]], out);\n    }\n  } else if (typeof value === 'string' && value) {\n    out.push(value);\n  }\n  return out;\n}\n\nfunction __brpParse(value) {\n  if (typeof value !== 'string') return value;\n  try {\n    return JSON.parse(value);\n  } catch (e) {\n    return value;\n  }\n}\n\n// Search columns are not checked here: the read drops the hidden ones from the\n// search (`__brpVisibleColumns`), and the storefront's own list bindings name them.\nfunction __brpAssertVisibleFields(policy, query) {\n  var q = query || {};\n  var fields = [];\n  __brpRequestFields(__brpParse(q.filters), fields);\n  __brpRequestFields(__brpParse(q.sorts), fields);\n  if (typeof q.sortBy === 'string') fields.push(q.sortBy);\n  for (var i = 0; i < fields.length; i++) {\n    if (__brpIsHidden(policy, fields[i])) {\n      var err = new Error('Forbidden: ' + __brpColumnName(fields[i]) + ' is not readable');\n      err.status = 403;\n      throw err;\n    }\n  }\n}\n\nfunction __brpVisibleColumns(policy, columns) {\n  return columns.filter(function(column) { return !__brpIsHidden(policy, column); });\n}\n\n// The rows without a hidden key, at any depth: a transformed row nests related\n// rows (a post's related and adjacent posts) built the same way.\nfunction __brpStripHidden(policy, value) {\n  if (Array.isArray(value)) {\n    return value.map(function(entry) { return __brpStripHidden(policy, entry); });\n  }\n  if (!value || typeof value !== 'object') return value;\n  var copy = {};\n  Object.keys(value).forEach(function(key) {\n    if (!__brpIsHidden(policy, key)) copy[key] = __brpStripHidden(policy, value[key]);\n  });\n  return copy;\n}\n\n// Whether this request is answered exactly as an anonymous visitor's would be,\n// so a response cached for one may serve the other. A read whose answer depends\n// on who asks (`viewDependent`: a narrowed, protected or admin-only table) or\n// that runs a raw statement differs for the store's own server code and its\n// administrators, and must never share a cache entry with a visitor.\nasync function __brpSharesPublicView(req, viewDependent) {\n  var raw = !!(req && req.query && typeof req.query.rawQuery === 'string' && req.query.rawQuery.length > 0);\n  if (!viewDependent && !raw) return true;\n  return !(await __brpReader(req)).trusted;\n}\n"); };
+var generateBrowserRowPolicyCode = function () { return "// GENERATED \u2014 see browser-row-policy.ts in teleport-plugin-next-data-source.\nvar __BRP_POLICIES = ".concat(JSON.stringify(exports.BROWSER_ROW_POLICIES), ";\n\n// What a page's own data carries of a member, read for a visitor: the public\n// profile (TableAccess.PUBLIC_PROFILE_COLUMNS) \u2014 an allow-list, so a column the\n// account row gains later stays out too. A browser reads the table not at all.\nvar __BRP_PUBLIC_PROFILE = ").concat(JSON.stringify({
+    predicate: 'TRUE',
+    hiddenColumns: [],
+    visibleColumns: teleport_shared_1.TableAccess.PUBLIC_PROFILE_COLUMNS,
+}), ";\n\n// Who is asking: the store's own server code and its administrators read every\n// row; anyone else is a visitor \u2014 a page's own data included (`__taIsVisitorView`).\nasync function __brpReader(req) {\n  if (__taIsVisitorView(req)) return { trusted: false };\n  if (__taIsInternalRequest(req)) return { trusted: true };\n  var token = null;\n  try {\n    token = await __tqSessionToken(req);\n  } catch (e) {\n    token = null;\n  }\n  var role = token ? __taRoleOf(token) : null;\n  return { trusted: !!role && __TA_TRUSTED_READER_ROLES.indexOf(role) !== -1 };\n}\n\nfunction __brpMentionsAny(rawQuery, tables) {\n  for (var i = 0; i < tables.length; i++) {\n    if (__taSqlMentionsTable(rawQuery, tables[i])) return true;\n  }\n  return false;\n}\n\n// A visitor's browser may not send a statement that names a narrowed table: it\n// is refused whole. A page's own statement, read for a visitor, is run over the\n// rows a visitor is served instead (`narrowRaw`, see `__brpNarrowRawQuery`).\n// The session is only decoded when the read touches one of these tables.\nasync function __brpAccess(req, tableName, rawQuery) {\n  var raw = typeof rawQuery === 'string' && rawQuery.length > 0 ? rawQuery : null;\n  if (!raw && __taIsVisitorView(req) && __taIsCredentialTable(tableName)) {\n    return { denied: null, policy: __BRP_PUBLIC_PROFILE };\n  }\n  var bare = __taNormalizeTable(tableName);\n  var rawNarrowed = !!raw && __brpMentionsAny(raw, Object.keys(__BRP_POLICIES));\n  var policy = raw ? null : (Object.prototype.hasOwnProperty.call(__BRP_POLICIES, bare) ? __BRP_POLICIES[bare] : null);\n  if (!rawNarrowed && !policy) return { denied: null, policy: null };\n  var reader = await __brpReader(req);\n  if (reader.trusted) return { denied: null, policy: null };\n  if (rawNarrowed) {\n    if (__taIsVisitorView(req)) return { denied: null, policy: null, narrowRaw: true };\n    return { denied: { status: 403, message: 'Forbidden: raw queries over this table are only available to server-side calls' }, policy: null };\n  }\n  return { denied: null, policy: policy };\n}\n\nfunction __brpRefuseRaw(what) {\n  var err = new Error('Forbidden: ' + what + ' cannot be read for a visitor');\n  err.status = 403;\n  return err;\n}\n\n// A page's own statement over the rows a visitor is served: every narrowed\n// table it reads becomes a WITH entry of the same name, ahead of the\n// statement, which its own references \u2014 and its own WITH entries \u2014 resolve to:\n//\n//   WITH \"teleport_products\" AS (SELECT * FROM \"teleport_products\" AS __brp_rows WHERE (<predicate>)) <statement>\n//\n// Inside its own definition the entry names the table itself (a WITH that is\n// not RECURSIVE does not see itself). A hidden column reads NULL however the\n// statement spells it \u2014 an alias, a whole-row value. A statement this cannot\n// vouch for is refused: unreadable or opaque, RECURSIVE (its entries would see\n// themselves), or naming a narrowed table through a schema, which reaches the\n// table past the entry.\nfunction __brpNarrowRawQuery(sql) {\n  var cleaned = __taCleanSql(sql);\n  if (!cleaned.ok || __TA_OPAQUE_SQL_RE.test(cleaned.text)) throw __brpRefuseRaw('this statement');\n  var tables = Object.keys(__BRP_POLICIES).filter(function(table) {\n    return new RegExp('(?:^|[^A-Za-z0-9_])\"?' + table + '\"?(?![A-Za-z0-9_])', 'i').test(cleaned.text);\n  });\n  if (tables.length === 0) return sql;\n  var leading = /^\\s*with\\b(\\s+recursive\\b)?/i.exec(cleaned.text);\n  if (leading && leading[1]) throw __brpRefuseRaw('a recursive statement');\n  tables.forEach(function(table) {\n    if (new RegExp('\\\\.\\\\s*\"?' + table + '\"?(?![A-Za-z0-9_])', 'i').test(cleaned.text)) throw __brpRefuseRaw(table);\n  });\n  var entries = tables.map(function(table) {\n    var policy = __BRP_POLICIES[table];\n    var hidden = {};\n    policy.hiddenColumns.forEach(function(column) { hidden[column] = null; });\n    var columns = policy.hiddenColumns.length > 0\n      ? '(jsonb_populate_record(__brp_rows, ' + \"'\" + JSON.stringify(hidden) + \"'\" + '::jsonb)).*'\n      : '*';\n    return '\"' + table + '\" AS (SELECT ' + columns + ' FROM \"' + table + '\" AS __brp_rows WHERE (' + policy.predicate + '))';\n  });\n  var statement = String(sql).trim().replace(/;\\s*$/, '');\n  if (!leading) return 'WITH ' + entries.join(', ') + ' ' + statement;\n  // The statement's own WITH list follows ours, so its entries read ours too.\n  var own = /^with\\b/i.exec(statement);\n  if (!own) throw __brpRefuseRaw('this statement');\n  return 'WITH ' + entries.join(', ') + ', ' + statement.slice(own[0].length);\n}\n\n// The rows of a statement narrowed for a visitor, without the hidden columns\n// of the tables it read.\nfunction __brpStripHiddenOfRaw(sql, rows) {\n  var cleaned = __taCleanSql(sql);\n  return Object.keys(__BRP_POLICIES).reduce(function(current, table) {\n    return cleaned.ok && __taSqlMentionsTable(sql, table) ? __brpStripHidden(__BRP_POLICIES[table], current) : current;\n  }, rows);\n}\n\nfunction __brpColumnName(field) {\n  var parts = String(field == null ? '' : field).replace(/\"/g, '').trim().split('.');\n  return parts[parts.length - 1];\n}\n\n// A column the policy keeps from the reader: one it hides, or \u2014 for a policy\n// that names the only columns it serves (`visibleColumns`) \u2014 any other.\nfunction __brpIsHidden(policy, field) {\n  var name = __brpColumnName(field).toLowerCase();\n  if (policy.visibleColumns) return policy.visibleColumns.indexOf(name) === -1;\n  for (var i = 0; i < policy.hiddenColumns.length; i++) {\n    if (policy.hiddenColumns[i].toLowerCase() === name) return true;\n  }\n  return false;\n}\n\n// Every field a request filters, sorts or searches by, however deep a filter\n// group nests it. A condition's value is data, not a field.\nfunction __brpRequestFields(value, out) {\n  if (Array.isArray(value)) {\n    for (var i = 0; i < value.length; i++) __brpRequestFields(value[i], out);\n  } else if (value && typeof value === 'object') {\n    if (typeof value.source === 'string') out.push(value.source);\n    if (typeof value.field === 'string') out.push(value.field);\n    var keys = Object.keys(value);\n    for (var k = 0; k < keys.length; k++) {\n      if (keys[k] === 'destination' || keys[k] === 'value') continue;\n      if (value[keys[k]] && typeof value[keys[k]] === 'object') __brpRequestFields(value[keys[k]], out);\n    }\n  } else if (typeof value === 'string' && value) {\n    out.push(value);\n  }\n  return out;\n}\n\nfunction __brpParse(value) {\n  if (typeof value !== 'string') return value;\n  try {\n    return JSON.parse(value);\n  } catch (e) {\n    return value;\n  }\n}\n\n// Search columns are not checked here: the read drops the hidden ones from the\n// search (`__brpVisibleColumns`), and the storefront's own list bindings name them.\nfunction __brpAssertVisibleFields(policy, query) {\n  var q = query || {};\n  var fields = [];\n  __brpRequestFields(__brpParse(q.filters), fields);\n  __brpRequestFields(__brpParse(q.sorts), fields);\n  if (typeof q.sortBy === 'string') fields.push(q.sortBy);\n  for (var i = 0; i < fields.length; i++) {\n    if (__brpIsHidden(policy, fields[i])) {\n      var err = new Error('Forbidden: ' + __brpColumnName(fields[i]) + ' is not readable');\n      err.status = 403;\n      throw err;\n    }\n  }\n}\n\nfunction __brpVisibleColumns(policy, columns) {\n  return columns.filter(function(column) { return !__brpIsHidden(policy, column); });\n}\n\n// The rows without a hidden key, at any depth: a transformed row nests related\n// rows (a post's related and adjacent posts) built the same way.\nfunction __brpStripHidden(policy, value) {\n  if (Array.isArray(value)) {\n    return value.map(function(entry) { return __brpStripHidden(policy, entry); });\n  }\n  if (!value || typeof value !== 'object') return value;\n  var copy = {};\n  Object.keys(value).forEach(function(key) {\n    if (!__brpIsHidden(policy, key)) copy[key] = __brpStripHidden(policy, value[key]);\n  });\n  return copy;\n}\n\n// Whether this request is answered exactly as an anonymous visitor's would be,\n// so a response cached for one may serve the other. A read whose answer depends\n// on who asks (`viewDependent`: a narrowed, protected or admin-only table) or\n// that runs a raw statement differs for the store's own server code and its\n// administrators, and must never share a cache entry with a visitor.\nasync function __brpSharesPublicView(req, viewDependent) {\n  var raw = !!(req && req.query && typeof req.query.rawQuery === 'string' && req.query.rawQuery.length > 0);\n  if (!viewDependent && !raw) return true;\n  return !(await __brpReader(req)).trusted;\n}\n"); };
 exports.generateBrowserRowPolicyCode = generateBrowserRowPolicyCode;
 /**
  * Whether a per-table read route's answer depends on who asks — the rows it

package/dist/cjs/fetchers/utils/browser-row-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-row-policy.js","sourceRoot":"","sources":["../../../../src/fetchers/utils/browser-row-policy.ts"],"names":[],"mappings":";;;AAAA,+DAA2D;AAwB3D;;;;GAIG;AACU,QAAA,oBAAoB,GAC/B,+BAAa,CAAC,oBAAoB,CAAA;AAEpC;;;;;;;GAOG;AACI,IAAM,4BAA4B,GACvC,cAAc,OAAA,mHACO,IAAI,CAAC,SAAS,CAAC,4BAAoB,CAAC,q8JA8H1D,EA/He,CA+Hf,CAAA;AAhIY,QAAA,4BAA4B,gCAgIxC;AAED;;;GAGG;AACI,IAAM,oBAAoB,GAAG,UAClC,SAAiB,EACjB,eAAsC;IAEtC,IAAM,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;SAClC,IAAI,EAAE;SACN,WAAW,EAAE;SACb,KAAK,CAAC,GAAG,CAAC,CAAA;IACb,IAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACtD,OAAO,CACL,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,4BAAoB,EAAE,IAAI,CAAC;QAChE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACrC,CAAA;AACH,CAAC,CAAA;AAbY,QAAA,oBAAoB,wBAahC;AAED;;;GAGG;AACI,IAAM,4BAA4B,GAAG,UAC1C,SAAiB,EACjB,YAA2B;IAE3B,OAAO,uDAAgD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAC9E,YAAY,IAAI,MAAM,yNAMzB,CAAA;AACD,CAAC,CAAA;AAZY,QAAA,4BAA4B,gCAYxC"}
+{"version":3,"file":"browser-row-policy.js","sourceRoot":"","sources":["../../../../src/fetchers/utils/browser-row-policy.ts"],"names":[],"mappings":";;;AAAA,+DAAwE;AAwBxE;;;;GAIG;AACU,QAAA,oBAAoB,GAC/B,+BAAa,CAAC,oBAAoB,CAAA;AAEpC;;;;;;;GAOG;AACI,IAAM,4BAA4B,GACvC,cAAc,OAAA,mHACO,IAAI,CAAC,SAAS,CAAC,4BAAoB,CAAC,oSAK9B,IAAI,CAAC,SAAS,CAAC;IACxC,SAAS,EAAE,MAAM;IACjB,aAAa,EAAE,EAAE;IACjB,cAAc,EAAE,6BAAW,CAAC,sBAAsB;CACnD,CAAC,shRA+LH,EAzMe,CAyMf,CAAA;AA1MY,QAAA,4BAA4B,gCA0MxC;AAED;;;GAGG;AACI,IAAM,oBAAoB,GAAG,UAClC,SAAiB,EACjB,eAAsC;IAEtC,IAAM,KAAK,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;SAClC,IAAI,EAAE;SACN,WAAW,EAAE;SACb,KAAK,CAAC,GAAG,CAAC,CAAA;IACb,IAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACtD,OAAO,CACL,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,4BAAoB,EAAE,IAAI,CAAC;QAChE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CACrC,CAAA;AACH,CAAC,CAAA;AAbY,QAAA,oBAAoB,wBAahC;AAED;;;GAGG;AACI,IAAM,4BAA4B,GAAG,UAC1C,SAAiB,EACjB,YAA2B;IAE3B,OAAO,uDAAgD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAC9E,YAAY,IAAI,MAAM,yNAMzB,CAAA;AACD,CAAC,CAAA;AAZY,QAAA,4BAA4B,gCAYxC"}

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,EAMvB,MAAM,4BAA4B,CAAA;AAodnC,eAAO,MAAM,+BAA+B,EAAE,sBAAsB,CAAC,EAAE,CAyftE,CAAA;AAiOD,eAAO,MAAM,mCAAmC,EAAE,sBAAsB,CAAC,EAAE,CA0P1E,CAAA;AAED,cAAc,wBAAwB,CAAA;AACtC,cAAc,SAAS,CAAA;AACvB,cAAc,2BAA2B,CAAA;AACzC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,sBAAsB,CAAA;AACpC,cAAc,yBAAyB,CAAA;AAIvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAA;AAChE,YAAY,EAAE,gCAAgC,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAGjG,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AACvF,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,EAMvB,MAAM,4BAA4B,CAAA;AAqdnC,eAAO,MAAM,+BAA+B,EAAE,sBAAsB,CAAC,EAAE,CA8ftE,CAAA;AAiOD,eAAO,MAAM,mCAAmC,EAAE,sBAAsB,CAAC,EAAE,CA0P1E,CAAA;AAED,cAAc,wBAAwB,CAAA;AACtC,cAAc,SAAS,CAAA;AACvB,cAAc,2BAA2B,CAAA;AACzC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA;AAChC,cAAc,sBAAsB,CAAA;AACpC,cAAc,yBAAyB,CAAA;AAIvC,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAA;AAChE,YAAY,EAAE,gCAAgC,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAGjG,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AACvF,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/cjs/index.js

@@ -61,10 +61,20 @@ var __generator = (this && this.__generator) || function (thisArg, body) {
         if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
     }
 };
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildServerLocaleParam = exports.REQUEST_LOCALE_PARAM = exports.resolveContentLocalization = exports.isLocalizedProject = exports.buildProductTransformOptions = exports.createNextComponentDataSourcePlugin = exports.createNextPagesDataSourcePlugin = void 0;
 var teleport_types_1 = require("@teleporthq/teleport-types");
 var teleport_shared_1 = require("@teleporthq/teleport-shared");
+var teleport_plugin_common_1 = require("@teleporthq/teleport-plugin-common");
 var utils_1 = require("./utils");
 var pagination_plugin_1 = require("./pagination-plugin");
 var repeater_page_size_1 = require("./repeater-page-size");
@@ -481,7 +491,7 @@ var createNextPagesDataSourcePlugin = function () {
                     // When multiple nodes share the same dataSourceKey (same resource ID), the function is
                     // idempotent for getStaticProps (skips duplicate fetches via existingInFetchMeta) but
                     // still updates the next uninitialized DataProvider JSX node on each call.
-                    var result = (0, utils_1.extractDataSourceIntoGetStaticProps)(dataSourceNode, dataSources, componentChunk, getStaticPropsChunk, chunks, options.extractedResources, dependencies, dynamicRouteAttr, (_c = uidl.outputOptions) === null || _c === void 0 ? void 0 : _c.folderPath, transformOptions);
+                    var result = (0, utils_1.extractDataSourceIntoGetStaticProps)(dataSourceNode, dataSources, componentChunk, getStaticPropsChunk, chunks, options.extractedResources, dependencies, dynamicRouteAttr, (_c = uidl.outputOptions) === null || _c === void 0 ? void 0 : _c.folderPath, transformOptions, function () { return teleport_plugin_common_1.RouteUtils.pageDataReadArguments(uidl, options.auth); }, uidl.stateDefinitions);
                     if (result.success && result.chunk) {
                         getStaticPropsChunk = result.chunk;
                         // Track the first data source info for wrapping dataSourceData expressions
@@ -570,7 +580,9 @@ var createNextPagesDataSourcePlugin = function () {
                             };
                             for (_b = 0, _c = wrapContext.wrappedProviders; _b < _c.length; _b++) {
                                 wrapped = _c[_b];
-                                fetchCallExpression = types.callExpression(types.memberExpression(types.identifier(fetcherImportName), types.identifier('fetchData')), [types.objectExpression([])]);
+                                fetchCallExpression = types.callExpression(types.memberExpression(types.identifier(fetcherImportName), types.identifier('fetchData')), __spreadArray([
+                                    types.objectExpression([])
+                                ], teleport_plugin_common_1.RouteUtils.pageDataReadArguments(uidl, options.auth), true));
                                 safeFetchExpression = types.callExpression(types.memberExpression(fetchCallExpression, types.identifier('catch')), [
                                     types.arrowFunctionExpression([types.identifier('error')], types.blockStatement([
                                         types.expressionStatement(types.callExpression(types.memberExpression(types.identifier('console'), types.identifier('error')), [