@teleporthq/teleport-plugin-next-data-source 0.44.14 → 0.44.17

package/__tests__/null-filter-where.test.ts

@@ -1,5 +1,6 @@
 /* tslint:disable:function-constructor */
 import { generateDataSourceFetcherWithCore } from '../src/data-source-fetchers'
+import { publicExposure } from './_helpers/exposure'
 
 /**
  * A board's "No status" column lists the rows whose status is empty. The GUI
@@ -33,9 +34,25 @@ const bootRoute = (type: 'teleport' | 'postgresql') => {
               team_events: { columns: [{ name: 'id' }, { name: 'priority' }] },
             },
           }
-        : { host: 'h', port: 5432, user: 'u', password: 'p', database: 'd' },
+        : {
+            host: 'h',
+            port: 5432,
+            user: 'u',
+            password: 'p',
+            database: 'd',
+            // The table's schema as the editor exports it: the only columns a
+            // request may name.
+            selectedTables: {
+              team_events: { columns: [{ name: 'id' }, { name: 'priority' }] },
+            },
+          },
   }
-  const code = generateDataSourceFetcherWithCore(dataSource as never, 'team_events', false, {})
+  const code = generateDataSourceFetcherWithCore(
+    dataSource as never,
+    'team_events',
+    false,
+    publicExposure(['team_events'])
+  )
     .replace(
       "import { Client, types as pgTypes } from 'pg'",
       "const { Client, types: pgTypes } = require('pg')"

package/__tests__/range-control.test.ts

@@ -31,6 +31,9 @@ const FROM_BY_PAGE = '(ds_0_total === 0 ? 0 : (ds_0_page - 1) * 20 + 1).toLocale
 const FROM_FIRST_ROW = '(ds_0_total === 0 ? 0 : 1).toLocaleString("en-US")'
 const TO = 'Math.min(ds_0_page * 20, ds_0_total).toLocaleString("en-US")'
 const TOTAL = 'ds_0_total.toLocaleString("en-US")'
+const PAGE = 'ds_0_page.toLocaleString("en-US")'
+const PAGES = '(ds_0_total === 0 ? 0 : Math.max(1, ds_0_maxPages)).toLocaleString("en-US")'
+const PER_PAGE = '(20).toLocaleString("en-US")'
 
 describe('pagination plugin — range control', () => {
   it('fills the authored words with the page window in buttons mode', async () => {
@@ -102,6 +105,32 @@ describe('pagination plugin — range control', () => {
     expect(flat).toContain('Math.min(ds_0_state.page * 20, ds_0_total).toLocaleString("en-US")')
   })
 
+  it('reads the page, the page count and the page size off the mapper', async () => {
+    const flat = collapse(
+      await runPlugin(
+        {},
+        { controls: ['range'], rangeTemplate: 'Page {page} of {pages} · {perPage} per page' }
+      )
+    )
+
+    // The page count is the counted `maxPages`: one page as long as there are
+    // rows, none when there are none — the same words the canvas reads.
+    expect(flat).toContain(
+      `${DRAWN} \`Page \${${PAGE}} of \${${PAGES}} · \${${PER_PAGE}} per page\``
+    )
+  })
+
+  it('reads the pages loaded so far as the page of an appending list', async () => {
+    const flat = collapse(
+      await runPlugin(
+        { infiniteScroll: true, infiniteScrollLoadMore: true },
+        { controls: ['range', 'load-more'], rangeTemplate: '{page} of {pages}' }
+      )
+    )
+
+    expect(flat).toContain(`${DRAWN} \`\${${PAGE}} of \${${PAGES}}\``)
+  })
+
   it('reads a template the JSX printer escaped the braces of', async () => {
     const flat = collapse(
       await runPlugin(

package/__tests__/search-relevance.test.ts

@@ -4,6 +4,8 @@ import { generateDataSourceFetcher } from '../src/data-source-fetchers'
 import { generateTeleportCountFetcher } from '../src/fetchers/teleport'
 import { generateCSVFileFetcher } from '../src/fetchers/csv-file'
 import { generateSearchRankHelperCode, generateSearchTermsCode } from '../src/search-relevance'
+import { DataExposure } from '@teleporthq/teleport-shared'
+import { publicRead } from './_helpers/exposure'
 
 /**
  * A list's search: the typed text is split into terms at white space, the
@@ -24,16 +26,38 @@ interface Query {
 
 const SEARCHED = JSON.stringify(['title', 'excerpt', 'content'])
 
+const ARTICLES_SCHEMA = {
+  articles: {
+    columns: [
+      { name: 'id' },
+      { name: 'title' },
+      { name: 'excerpt' },
+      { name: 'content' },
+      { name: 'sort_order' },
+      { name: 'status' },
+    ],
+  },
+}
+
 const pgRoute = (type: 'teleport' | 'postgresql', withCount = false) => {
   const config =
     type === 'teleport'
       ? {
           host: 'db',
           database: 'site',
-          selectedTables: { articles: { columns: [{ name: 'id' }] } },
+          selectedTables: ARTICLES_SCHEMA,
         }
-      : { host: 'h', port: 5432, user: 'u', password: 'p', database: 'd' }
-  const route = generateDataSourceFetcher({ type, config } as never, 'articles')
+      : {
+          host: 'h',
+          port: 5432,
+          user: 'u',
+          password: 'p',
+          database: 'd',
+          selectedTables: ARTICLES_SCHEMA,
+        }
+  const route = generateDataSourceFetcher({ type, config } as never, 'articles', {
+    routeExposure: publicRead(),
+  })
   return withCount && type === 'teleport'
     ? route + generateTeleportCountFetcher(config, 'articles')
     : route
@@ -167,7 +191,9 @@ describe.each(['teleport', 'postgresql'] as const)('the %s list route', (type) =
       queryColumns: JSON.stringify(['title']),
     })
     expect(main.sql).toMatch(
-      new RegExp(` ORDER BY \\(CASE WHEN .* THEN 3 .* ELSE 0 END\\) DESC(, "id" ASC)?$`)
+      new RegExp(
+        ` ORDER BY \\(CASE WHEN .* THEN 3 .* ELSE 0 END\\) DESC, "id" ASC LIMIT ${DataExposure.BROWSER_READ_DEFAULT_LIMIT}$`
+      )
     )
   })
 
@@ -205,8 +231,18 @@ describe('the built-in database count route', () => {
 
 describe('the MySQL list route', () => {
   const route = generateDataSourceFetcher(
-    { type: 'mysql', config: { host: 'h', user: 'u', password: 'p', database: 'd' } } as never,
-    'articles'
+    {
+      type: 'mysql',
+      config: {
+        host: 'h',
+        user: 'u',
+        password: 'p',
+        database: 'd',
+        selectedTables: ARTICLES_SCHEMA,
+      },
+    } as never,
+    'articles',
+    { routeExposure: publicRead() }
   )
 
   it('binds the ranking terms after every WHERE parameter, as the ORDER BY follows the WHERE', async () => {

package/__tests__/table-read-route-protected-tables.test.ts

@@ -3,6 +3,14 @@ import type { UIDLAuthentication } from '@teleporthq/teleport-types'
 import { TableAccess } from '@teleporthq/teleport-shared'
 import { generateDataSourceFetcherWithCore } from '../src/data-source-fetchers'
 import { buildProductTransformOptions } from '../src/transformations'
+import { publicExposure } from './_helpers/exposure'
+import {
+  isSecurityRuntimeSpecifier,
+  loadSecurityRuntime,
+} from '../../teleport-plugin-next-workflows/__tests__/_helpers/load-security-runtime'
+
+// The data routes compare the app secret with the shared runtime's safeEqual.
+const securityRuntime = loadSecurityRuntime()
 
 /**
  * Every table a page binds gets a read route (`/api/teleport-<table>-<source>`
@@ -54,11 +62,28 @@ function bootTableRoute(
       user: 'teleporthq.secrets.TELEPORT_DB_USER',
       password: 'teleporthq.secrets.TELEPORT_DB_PASSWORD',
       database: 'teleporthq.secrets.TELEPORT_DB_NAME',
-      selectedTables: { [tableName]: { columns: [{ name: 'id', type: 'uuid' }] } },
+      // The table's schema as the editor exports it: the only columns a request may name.
+      selectedTables: {
+        [tableName]: {
+          columns: [
+            { name: 'id', type: 'uuid' },
+            { name: 'title' },
+            { name: 'name' },
+            { name: 'status' },
+            { name: 'slug' },
+            { name: 'author_email' },
+            { name: 'created_at' },
+            { name: 'price' },
+            { name: 'code' },
+          ],
+        },
+      },
     },
   }
+  // Even a table a public page binds stays behind the protected-table net.
   const esm = generateDataSourceFetcherWithCore(dataSource as never, tableName, false, {
     trustedReaderRoles,
+    ...publicExposure([tableName]),
   })
   // The route is an ES module; run it as a script with the same bindings.
   const code = esm
@@ -102,6 +127,9 @@ function bootTableRoute(
     if (name === 'next-auth/jwt') {
       return { getToken: async () => (session ? { sub: 'u1', role: session.role } : null) }
     }
+    if (isSecurityRuntimeSpecifier(name)) {
+      return securityRuntime
+    }
     throw new Error('unexpected require: ' + name)
   }
   const moduleObj: { exports: any } = { exports: {} }
@@ -210,6 +238,27 @@ describe('per-table read routes — money and customer tables are read only by t
     await expect(vouchers.serverCall('fetchCount')).resolves.toBe(0)
   })
 
+  it('A3: refuses the retired reset-token table to every caller, the app secret and its own server calls too', async () => {
+    const resets = bootTableRoute('password_reset_tokens', ADMIN_ROLES)
+    for (const call of [
+      { handler: 'handler' as const, headers: internal },
+      { handler: 'getCount' as const, headers: internal },
+      { handler: 'handler' as const, session: { role: 'admin' } },
+    ]) {
+      const answer = await resets(call)
+      expect(answer.status).toBe(403)
+      expect(answer.queries).toEqual([])
+    }
+    // A raw statement naming it, through any other table's route.
+    const viaRaw = await products({
+      handler: 'handler',
+      headers: internal,
+      query: { rawQuery: 'SELECT * FROM "public"."Password_Reset_Tokens"' },
+    })
+    expect(viaRaw.status).toBe(403)
+    expect(viaRaw.queries).toEqual([])
+  })
+
   it('refuses a browser every raw statement, whatever it names, once the app has a secret', async () => {
     // Generated pages never send one: their raw queries run in getStaticProps
     // (the module's own fetchData) or in server segments. So no statement scan
@@ -244,13 +293,14 @@ describe('per-table read routes — money and customer tables are read only by t
       expect(result.status).toBe(400)
       expect(result.queries).toEqual([])
     }
-    // A row count is a number or nothing: the sub-select never reaches SQL.
+    // A row count is a whole number or nothing: anything else is refused
+    // before the database is touched, so the sub-select never reaches SQL.
     const limited = await products({
       handler: 'handler',
       query: { limit: '(SELECT 1 FROM teleport_vouchers)' },
     })
-    expect(limited.status).toBe(200)
-    expect(limited.queries.join('\n')).not.toMatch(/teleport_vouchers|LIMIT/)
+    expect(limited.status).toBe(400)
+    expect(limited.queries).toEqual([])
     const count = await products({
       handler: 'getCount',
       query: { filters: JSON.stringify([{ source: smuggled, operand: '=', destination: 1 }]) },

package/dist/cjs/count-fetchers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"count-fetchers.d.ts","sourceRoot":"","sources":["../../src/count-fetchers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAE3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AAElE,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,CAAA;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAqF1F"}
+{"version":3,"file":"count-fetchers.d.ts","sourceRoot":"","sources":["../../src/count-fetchers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAE3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AAElE,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,CAAA;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CA6F1F"}

package/dist/cjs/count-fetchers.js

@@ -43,7 +43,7 @@ function generateCountFetcher(dataSource, tableName) {
         case 'csv-file':
             return (0, csv_file_1.generateCSVCountFetcher)(config);
         default:
-            return "\nasync function getCount(req, res) {\n  try {\n    // `collectionPath` has to travel with the rest: this counts by re-running\n    // the fetch handler and measuring its result, and without the path that\n    // handler gets the wrapper object rather than the records, which is not an\n    // array \u2014 so the count below would report 0 for a list that clearly has rows.\n    const { query, queryColumns, filters, collectionPath } = req.query\n    const fakeReq = { query: { query, queryColumns, filters, collectionPath }, method: 'GET' }\n    let result = null\n    let statusCode = 200\n    \n    const fakeRes = {\n      status: (code) => {\n        statusCode = code\n        return fakeRes\n      },\n      json: (data) => {\n        result = data\n        return fakeRes\n      },\n    }\n    \n    await handler(fakeReq, fakeRes)\n    \n    if (statusCode !== 200 || !result || !result.success) {\n      return res.status(500).json({\n        success: false,\n        error: 'Failed to get data for counting',\n        timestamp: Date.now()\n      })\n    }\n    \n    const count = Array.isArray(result.data) ? result.data.length : 0\n    \n    return res.status(200).json({\n      success: true,\n      count: count,\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('Error getting count:', error)\n    return res.status(500).json({\n      success: false,\n      error: error.message || 'Failed to get count',\n      timestamp: Date.now()\n    })\n  }\n}\n";
+            return "\nasync function getCount(req, res) {\n  try {\n    // `collectionPath` has to travel with the rest: this counts by re-running\n    // the fetch handler and measuring its result, and without the path that\n    // handler gets the wrapper object rather than the records, which is not an\n    // array \u2014 so the count below would report 0 for a list that clearly has rows.\n    const { query, queryColumns, filters, collectionPath } = req.query\n    // The count route already let this request through (see\n    // external-read-guard.ts); counting re-reads every matching row as the\n    // route's own server-side call, never capped to a browser's window.\n    const fakeReq = {\n      query: { query, queryColumns, filters, collectionPath },\n      method: 'GET',\n      headers: req.headers || {},\n      __tqServerCall: true,\n    }\n    let result = null\n    let statusCode = 200\n    \n    const fakeRes = {\n      status: (code) => {\n        statusCode = code\n        return fakeRes\n      },\n      json: (data) => {\n        result = data\n        return fakeRes\n      },\n    }\n    \n    await handler(fakeReq, fakeRes)\n    \n    if (statusCode !== 200 || !result || !result.success) {\n      return res.status(500).json({\n        success: false,\n        error: 'Failed to get data for counting',\n        timestamp: Date.now()\n      })\n    }\n    \n    const count = Array.isArray(result.data) ? result.data.length : 0\n    \n    return res.status(200).json({\n      success: true,\n      count: count,\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('Error getting count:', error)\n    return res.status(500).json({\n      success: false,\n      error: 'Failed to get count',\n      timestamp: Date.now()\n    })\n  }\n}\n";
     }
 }
 exports.generateCountFetcher = generateCountFetcher;

package/dist/cjs/count-fetchers.js.map

@@ -1 +1 @@
-{"version":3,"file":"count-fetchers.js","sourceRoot":"","sources":["../../src/count-fetchers.ts"],"names":[],"mappings":";;;AACA,+DAA2E;AAC3E,oDAAsE;AAUpE,+GAVO,2CAA8B,OAUP;AAThC,0CAA4D;AAU1D,0GAVO,iCAAyB,OAUP;AAT3B,8CAAgE;AAU9D,4GAVO,qCAA2B,OAUP;AAT7B,8CAAgE;AAU9D,4GAVO,qCAA2B,OAUP;AAT7B,gDAAkE;AAUhE,6GAVO,uCAA4B,OAUP;AAT9B,oDAAsE;AAUpE,+GAVO,2CAA8B,OAUP;AAThC,gDAA6D;AAU3D,wGAVO,kCAAuB,OAUP;AATzB,gDAAkE;AAUhE,6GAVO,uCAA4B,OAUP;AAG9B,SAAgB,oBAAoB,CAAC,UAA0B,EAAE,SAAiB;IACxE,IAAA,IAAI,GAAa,UAAU,KAAvB,EAAE,MAAM,GAAK,UAAU,OAAf,CAAe;IAEnC,QAAQ,IAAI,EAAE;QACZ,KAAK,UAAU;YACb,OAAO,IAAA,uCAA4B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAExD,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa;YAChB,OAAO,IAAA,2CAA8B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAE1D,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAO,IAAA,iCAAyB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAErD,KAAK,SAAS;YACZ,OAAO,IAAA,qCAA2B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAEvD,KAAK,SAAS;YACZ,OAAO,IAAA,qCAA2B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAEvD,KAAK,UAAU;YACb,IAAI,IAAA,yDAAkC,EAAC,MAAM,CAAC,EAAE;gBAC9C,OAAO,IAAA,2CAA8B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACzD;YACD,OAAO,IAAA,uCAA4B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAExD,KAAK,YAAY;YACf,OAAO,IAAA,2CAA8B,EAAC,MAAM,CAAC,CAAA;QAE/C,KAAK,UAAU;YACb,OAAO,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAA;QAExC;YACE,OAAO,09CAiDZ,CAAA;KACE;AACH,CAAC;AArFD,oDAqFC"}
+{"version":3,"file":"count-fetchers.js","sourceRoot":"","sources":["../../src/count-fetchers.ts"],"names":[],"mappings":";;;AACA,+DAA2E;AAC3E,oDAAsE;AAUpE,+GAVO,2CAA8B,OAUP;AAThC,0CAA4D;AAU1D,0GAVO,iCAAyB,OAUP;AAT3B,8CAAgE;AAU9D,4GAVO,qCAA2B,OAUP;AAT7B,8CAAgE;AAU9D,4GAVO,qCAA2B,OAUP;AAT7B,gDAAkE;AAUhE,6GAVO,uCAA4B,OAUP;AAT9B,oDAAsE;AAUpE,+GAVO,2CAA8B,OAUP;AAThC,gDAA6D;AAU3D,wGAVO,kCAAuB,OAUP;AATzB,gDAAkE;AAUhE,6GAVO,uCAA4B,OAUP;AAG9B,SAAgB,oBAAoB,CAAC,UAA0B,EAAE,SAAiB;IACxE,IAAA,IAAI,GAAa,UAAU,KAAvB,EAAE,MAAM,GAAK,UAAU,OAAf,CAAe;IAEnC,QAAQ,IAAI,EAAE;QACZ,KAAK,UAAU;YACb,OAAO,IAAA,uCAA4B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAExD,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa;YAChB,OAAO,IAAA,2CAA8B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAE1D,KAAK,OAAO,CAAC;QACb,KAAK,MAAM;YACT,OAAO,IAAA,iCAAyB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAErD,KAAK,SAAS;YACZ,OAAO,IAAA,qCAA2B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAEvD,KAAK,SAAS;YACZ,OAAO,IAAA,qCAA2B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAEvD,KAAK,UAAU;YACb,IAAI,IAAA,yDAAkC,EAAC,MAAM,CAAC,EAAE;gBAC9C,OAAO,IAAA,2CAA8B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACzD;YACD,OAAO,IAAA,uCAA4B,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAExD,KAAK,YAAY;YACf,OAAO,IAAA,2CAA8B,EAAC,MAAM,CAAC,CAAA;QAE/C,KAAK,UAAU;YACb,OAAO,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAA;QAExC;YACE,OAAO,kvDAyDZ,CAAA;KACE;AACH,CAAC;AA7FD,oDA6FC"}

package/dist/cjs/data-source-fetchers.d.ts

@@ -9,6 +9,10 @@ interface DataSourceFetcherDependencies {
 }
 export declare const isSupabaseConnectionStringFallback: (config: Record<string, unknown>) => boolean;
 export declare const getDataSourceDependencies: (type: DataSourceType, config?: Record<string, unknown>) => DataSourceFetcherDependencies;
+/**
+ * The read route of `tableName` over `dataSource`: its driver's fetcher, behind
+ * the read guard (see `fetchers/utils/table-access-guard.ts`).
+ */
 export declare function generateDataSourceFetcher(dataSource: UIDLDataSource, tableName: string, transformOptions?: EntityTransformOptions): string;
 /**
  * Generates a fetcher with both a core fetchData function (for server-side use in getStaticProps)

package/dist/cjs/data-source-fetchers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"data-source-fetchers.d.ts","sourceRoot":"","sources":["../../src/data-source-fetchers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3E,OAAO,EA6BL,uBAAuB,EACvB,2BAA2B,EAC5B,MAAM,YAAY,CAAA;AAGnB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAE/D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AAajE,OAAO,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,CAAA;AAE/D,UAAU,6BAA6B;IACrC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,eAAO,MAAM,kCAAkC,WAAY,OAAO,MAAM,EAAE,OAAO,CAAC,KAAG,OAEpF,CAAA;AAED,eAAO,MAAM,yBAAyB,SAC9B,cAAc,WACX,OAAO,MAAM,EAAE,OAAO,CAAC,KAC/B,6BA4BF,CAAA;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,MAAM,EACjB,gBAAgB,GAAE,sBAA2B,GAC5C,MAAM,CAsKR;AAED;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,OAAe,EAC3B,gBAAgB,GAAE,sBAA2B,EAC7C,YAAY,CAAC,EAAE,4BAA4B,GAC1C,MAAM,CAiMR"}
+{"version":3,"file":"data-source-fetchers.d.ts","sourceRoot":"","sources":["../../src/data-source-fetchers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3E,OAAO,EA6BL,uBAAuB,EACvB,2BAA2B,EAC5B,MAAM,YAAY,CAAA;AAGnB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAE/D,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AAkBjE,OAAO,EAAE,uBAAuB,EAAE,2BAA2B,EAAE,CAAA;AAE/D,UAAU,6BAA6B;IACrC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,eAAO,MAAM,kCAAkC,WAAY,OAAO,MAAM,EAAE,OAAO,CAAC,KAAG,OAEpF,CAAA;AAED,eAAO,MAAM,yBAAyB,SAC9B,cAAc,WACX,OAAO,MAAM,EAAE,OAAO,CAAC,KAC/B,6BA4BF,CAAA;AAaD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,MAAM,EACjB,gBAAgB,GAAE,sBAA2B,GAC5C,MAAM,CAiBR;AAyMD;;;GAGG;AACH,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,cAAc,EAC1B,SAAS,EAAE,MAAM,EACjB,UAAU,GAAE,OAAe,EAC3B,gBAAgB,GAAE,sBAA2B,EAC7C,YAAY,CAAC,EAAE,4BAA4B,GAC1C,MAAM,CAoPR"}

package/dist/cjs/data-source-fetchers.js

@@ -1,4 +1,15 @@
 "use strict";
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
 var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
     if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
         if (ar || !(i in from)) {
@@ -17,6 +28,8 @@ var validation_1 = require("./validation");
 var count_fetchers_1 = require("./count-fetchers");
 var teleport_shared_1 = require("@teleporthq/teleport-shared");
 var browser_row_policy_1 = require("./fetchers/utils/browser-row-policy");
+var external_read_guard_1 = require("./fetchers/utils/external-read-guard");
+var table_access_guard_1 = require("./fetchers/utils/table-access-guard");
 /** `public."users"` → `users`: the table a spelling names. */
 var bareTableName = function (tableName) {
     return (String(tableName || '')
@@ -57,7 +70,48 @@ var getDataSourceDependencies = function (type, config) {
     return dependencyMap[type];
 };
 exports.getDataSourceDependencies = getDataSourceDependencies;
+/**
+ * Whether the driver's read route carries the table-access guard inline (the
+ * TeleportHQ and Postgres-family fetchers); every other driver is wrapped by
+ * `guardExternalDriverModule`.
+ */
+var hasInlineReadGuard = function (dataSource) {
+    return dataSource.type === 'teleport' ||
+        dataSource.type === 'postgresql' ||
+        dataSource.type === 'cockroachdb' ||
+        (dataSource.type === 'supabase' && (0, exports.isSupabaseConnectionStringFallback)(dataSource.config));
+};
+/**
+ * The read route of `tableName` over `dataSource`: its driver's fetcher, behind
+ * the read guard (see `fetchers/utils/table-access-guard.ts`).
+ */
 function generateDataSourceFetcher(dataSource, tableName, transformOptions) {
+    if (transformOptions === void 0) { transformOptions = {}; }
+    var routeExposure = routeExposureOf(dataSource, tableName, transformOptions);
+    var driverCode = generateDriverFetcher(dataSource, tableName, __assign(__assign({}, transformOptions), { routeExposure: routeExposure }));
+    if (hasInlineReadGuard(dataSource)) {
+        return driverCode;
+    }
+    return (0, external_read_guard_1.guardExternalDriverModule)(driverCode, {
+        tableName: tableName,
+        dataSourceType: dataSource.type,
+        exposure: routeExposure,
+        trustedReaderRoles: transformOptions.trustedReaderRoles || [],
+        schema: (0, table_access_guard_1.schemaOf)(dataSource.config, tableName),
+        reader: transformOptions,
+    });
+}
+exports.generateDataSourceFetcher = generateDataSourceFetcher;
+/** The exposure of the route of `tableName` over `dataSource` (by source id and table). */
+var routeExposureOf = function (dataSource, tableName, transformOptions) {
+    return transformOptions.routeExposure ||
+        teleport_shared_1.DataExposure.readExposureFor(transformOptions.dataExposure, {
+            tableName: tableName,
+            dataSourceId: dataSource && dataSource.id,
+            dataSourceType: dataSource && dataSource.type,
+        });
+};
+function generateDriverFetcher(dataSource, tableName, transformOptions) {
     if (transformOptions === void 0) { transformOptions = {}; }
     if (!dataSource || typeof dataSource !== 'object') {
         throw new Error('Invalid data source: data source must be a valid object');
@@ -77,7 +131,7 @@ function generateDataSourceFetcher(dataSource, tableName, transformOptions) {
                 if (!validation.isValid) {
                     throw new Error("PostgreSQL/CockroachDB config validation failed: ".concat(validation.error));
                 }
-                return (0, fetchers_1.generatePostgreSQLFetcher)(config, tableName, transformOptions.trustedReaderRoles);
+                return (0, fetchers_1.generatePostgreSQLFetcher)(config, tableName, transformOptions.trustedReaderRoles, transformOptions.dataExposure, transformOptions.routeExposure, transformOptions);
             }
             case 'mysql':
             case 'tidb': {
@@ -143,7 +197,7 @@ function generateDataSourceFetcher(dataSource, tableName, transformOptions) {
                     if (!pgValidation.isValid) {
                         throw new Error("Supabase (PostgreSQL fallback) config validation failed: ".concat(pgValidation.error));
                     }
-                    return (0, fetchers_1.generatePostgreSQLFetcher)(config, tableName, transformOptions.trustedReaderRoles);
+                    return (0, fetchers_1.generatePostgreSQLFetcher)(config, tableName, transformOptions.trustedReaderRoles, transformOptions.dataExposure, transformOptions.routeExposure, transformOptions);
                 }
                 var validation = (0, fetchers_1.validateSupabaseConfig)(config);
                 if (!validation.isValid) {
@@ -203,7 +257,6 @@ function generateDataSourceFetcher(dataSource, tableName, transformOptions) {
         throw new Error("Failed to generate fetcher for ".concat(type, ": ").concat(errorMessage));
     }
 }
-exports.generateDataSourceFetcher = generateDataSourceFetcher;
 /**
  * Generates a fetcher with both a core fetchData function (for server-side use in getStaticProps)
  * and an API handler (for client-side use)
@@ -211,6 +264,12 @@ exports.generateDataSourceFetcher = generateDataSourceFetcher;
 function generateDataSourceFetcherWithCore(dataSource, tableName, isApiRoute, transformOptions, cacheOptions) {
     if (isApiRoute === void 0) { isApiRoute = false; }
     if (transformOptions === void 0) { transformOptions = {}; }
+    // A row-owned page's read answers each session its own rows: nothing about
+    // it may be cached for another (see DataReadExposure.ownerRules).
+    var ownedExposure = routeExposureOf(dataSource, tableName, transformOptions);
+    var routeCacheOptions = ownedExposure.public || ownedExposure.anySession || !(ownedExposure.ownerRules || []).length
+        ? cacheOptions
+        : undefined;
     var apiHandler = generateDataSourceFetcher(dataSource, tableName, transformOptions);
     // Extract the handler function body from the API route
     // The API route is structured as: export default async function handler(req, res) { ... }
@@ -221,8 +280,12 @@ function generateDataSourceFetcherWithCore(dataSource, tableName, isApiRoute, tr
     var importRegex = /^import\s+.*?$/gm;
     var imports = handlerCode.match(importRegex) || [];
     var handlerWithoutImports = handlerCode.replace(importRegex, '').trim();
-    // Generate count fetcher code and extract its imports
-    var countFetcherCode = (0, count_fetchers_1.generateCountFetcher)(dataSource, tableName);
+    // Generate count fetcher code and extract its imports. An external driver's
+    // count runs behind the same guard as its rows.
+    var driverCountCode = (0, count_fetchers_1.generateCountFetcher)(dataSource, tableName);
+    var countFetcherCode = hasInlineReadGuard(dataSource)
+        ? driverCountCode
+        : (0, external_read_guard_1.guardExternalDriverCount)(driverCountCode);
     var countImports = countFetcherCode.match(importRegex) || [];
     var countFetcherWithoutImports = countFetcherCode.replace(importRegex, '').trim();
     // Combine and deduplicate imports
@@ -236,41 +299,55 @@ function generateDataSourceFetcherWithCore(dataSource, tableName, isApiRoute, tr
     // The import depth differs by destination: this module is written to
     // `utils/data-sources/` normally, but the `isApiRoute` variant is inlined
     // straight into `pages/api/`.
-    var cachePreamble = cacheOptions
+    var cachePreamble = routeCacheOptions
         ? "import { tqWithCache } from '".concat(isApiRoute ? '../../' : '../', "tq-cache/server'")
         : '';
     // A module carrying the browser row policy (the Postgres-family routes) keys
     // its cache by who is reading; see `__tqCacheByView` below.
     var splitsCacheByView = handlerCode.indexOf('function __brpSharesPublicView(') !== -1;
-    var cacheWiring = cacheOptions
+    // Only a table every visitor may read can sit in a shared (CDN) cache, and a
+    // table only some sessions may read is checked BEFORE the cache: a cached
+    // answer never reaches a visitor the route itself would refuse.
+    var routeExposure = routeExposureOf(dataSource, tableName, transformOptions);
+    var routeIsPublic = routeExposure.public;
+    var sharedCacheSeconds = function (seconds) {
+        return routeIsPublic ? seconds || 0 : 0;
+    };
+    var cacheWiring = routeCacheOptions
         ? "\nconst __tqDataCache = ".concat(JSON.stringify({
-            scope: cacheOptions.scope,
-            ttl: cacheOptions.ttlSeconds,
-            sMaxAge: cacheOptions.sMaxAge || 0,
-            swr: cacheOptions.staleWhileRevalidate || 0,
+            scope: routeCacheOptions.scope,
+            ttl: routeCacheOptions.ttlSeconds,
+            sMaxAge: sharedCacheSeconds(routeCacheOptions.sMaxAge),
+            swr: sharedCacheSeconds(routeCacheOptions.staleWhileRevalidate),
         }), "\nconst __tqCountCache = ").concat(JSON.stringify({
-            scope: teleport_shared_1.DataCache.countScopeFor(cacheOptions.scope),
+            scope: teleport_shared_1.DataCache.countScopeFor(routeCacheOptions.scope),
             // Its OWN keyspace, but the DATA scope's version row. A write bumps one
             // row; if the count kept a separate version nothing would ever bump it,
             // and the total would stay stale after every create and delete — the
             // grid showing one more row than the pager counts.
-            versionScope: cacheOptions.scope,
-            ttl: cacheOptions.ttlSeconds,
-            sMaxAge: cacheOptions.sMaxAge || 0,
-            swr: cacheOptions.staleWhileRevalidate || 0,
+            versionScope: routeCacheOptions.scope,
+            ttl: routeCacheOptions.ttlSeconds,
+            sMaxAge: sharedCacheSeconds(routeCacheOptions.sMaxAge),
+            swr: sharedCacheSeconds(routeCacheOptions.staleWhileRevalidate),
         }), "\n\n").concat(splitsCacheByView
-            ? "// The store's own server code and its administrators may be served rows a\n// visitor is not (see __brpSharesPublicView), so they read and fill a cache of\n// their own \u2014 one never marked for a shared (CDN) cache either.\nconst __tqViewDependent = ".concat(JSON.stringify((0, browser_row_policy_1.isViewDependentTable)(tableName, __spreadArray(__spreadArray([], teleport_shared_1.TableAccess.PROTECTED_TABLES, true), Object.keys(teleport_shared_1.TableAccess.PUBLIC_FEED_TABLES), true))), "\n// The members' public profiles a page reads (see __BRP_PUBLIC_PROFILE) are never\n// a visitor's answer \u2014 a browser is served no row of the table \u2014 so they are\n// read fresh, never kept where a browser's request could be answered from.\nconst __tqProfileTable = ").concat(JSON.stringify(teleport_shared_1.TableAccess.AUTH_CREDENTIAL_TABLES.indexOf(bareTableName(tableName)) !== -1), "\nfunction __tqCacheByView(fn, opts) {\n  const publicView = tqWithCache(fn, opts)\n  const trustedView = tqWithCache(fn, Object.assign({}, opts, {\n    scope: opts.scope + ':trusted',\n    versionScope: opts.versionScope || opts.scope,\n    sMaxAge: 0,\n    swr: 0,\n  }))\n  return async function (req, res) {\n    if (__tqProfileTable && __taIsVisitorView(req)) return fn(req, res)\n    return (await __brpSharesPublicView(req, __tqViewDependent)) ? publicView(req, res) : trustedView(req, res)\n  }\n}\n\nconst cachedHandler = __tqCacheByView(handler, __tqDataCache)\nconst cachedGetCount = __tqCacheByView(getCount, __tqCountCache)")
+            ? "// The store's own server code and its administrators may be served rows a\n// visitor is not (see __brpSharesPublicView), so they read and fill a cache of\n// their own \u2014 one never marked for a shared (CDN) cache either.\nconst __tqViewDependent = ".concat(JSON.stringify((0, browser_row_policy_1.isViewDependentTable)(tableName, __spreadArray(__spreadArray([], teleport_shared_1.TableAccess.PROTECTED_TABLES, true), Object.keys(teleport_shared_1.TableAccess.PUBLIC_FEED_TABLES), true))), "\n// The members' public profiles a page reads (see __BRP_PUBLIC_PROFILE) are never\n// a visitor's answer \u2014 a browser is served no row of the table \u2014 so they are\n// read fresh, never kept where a browser's request could be answered from.\nconst __tqProfileTable = ").concat(JSON.stringify(teleport_shared_1.TableAccess.AUTH_CREDENTIAL_TABLES.indexOf(bareTableName(tableName)) !== -1), "\nfunction __tqCacheByView(fn, opts) {\n  const publicView = tqWithCache(fn, opts)\n  const trustedView = tqWithCache(fn, Object.assign({}, opts, {\n    scope: opts.scope + ':trusted',\n    versionScope: opts.versionScope || opts.scope,\n    sMaxAge: 0,\n    swr: 0,\n  }))\n  // The app's own server code reads whole tables; a browser's read is capped\n  // (__taReadWindow). Neither is ever served the other's answer.\n  const serverView = tqWithCache(fn, Object.assign({}, opts, {\n    scope: opts.scope + ':server',\n    versionScope: opts.versionScope || opts.scope,\n    sMaxAge: 0,\n    swr: 0,\n  }))\n  return async function (req, res) {\n    if (__taIsInternalRequest(req)) return serverView(req, res)\n    if (__tqProfileTable && __taIsVisitorView(req)) return fn(req, res)\n    return (await __brpSharesPublicView(req, __tqViewDependent)) ? publicView(req, res) : trustedView(req, res)\n  }\n}\n").concat(routeIsPublic
+                ? ''
+                : "\n// Readable only by some sessions (see __TA_ROUTE_EXPOSURE): the session is\n// checked before any cached answer is handed out.\nfunction __tqExposureFirst(fn) {\n  return async function (req, res) {\n    const __denied = await __taGuardExposure(req)\n    if (__denied) {\n      return res.status(__denied.status).json({ success: false, error: __denied.message, timestamp: Date.now() })\n    }\n    return fn(req, res)\n  }\n}\n", "\nconst cachedHandler = ").concat(routeIsPublic
+                ? '__tqCacheByView(handler, __tqDataCache)'
+                : '__tqExposureFirst(__tqCacheByView(handler, __tqDataCache))', "\nconst cachedGetCount = ").concat(routeIsPublic
+                ? '__tqCacheByView(getCount, __tqCountCache)'
+                : '__tqExposureFirst(__tqCacheByView(getCount, __tqCountCache))')
             : "const cachedHandler = tqWithCache(handler, __tqDataCache)\nconst cachedGetCount = tqWithCache(getCount, __tqCountCache)", "\n")
         : '';
-    var handlerExport = cacheOptions ? 'cachedHandler' : 'handler';
-    var countExport = cacheOptions ? 'cachedGetCount' : 'getCount';
+    var handlerExport = routeCacheOptions ? 'cachedHandler' : 'handler';
+    var countExport = routeCacheOptions ? 'cachedGetCount' : 'getCount';
     // For API routes, export just the handler function
     // For utils files, export the full object with all functions
     //
     // The uncached branch is spelled out verbatim rather than interpolated, so an
     // uncached project keeps generating byte-identical output — `handler as
     // handler` would be harmless at runtime and still a diff in every snapshot.
-    var exports = !cacheOptions
+    var exports = !routeCacheOptions
         ? isApiRoute
             ? 'export default handler'
             : "export { fetchData, fetchCount, handler, getCount }\nexport default { fetchData, fetchCount, handler, getCount }"

package/dist/cjs/data-source-fetchers.js.map

@@ -1 +1 @@
-{"version":3,"file":"data-source-fetchers.js","sourceRoot":"","sources":["../../src/data-source-fetchers.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,uCA+BmB;AAkBV,wGApBP,kCAAuB,OAoBO;AAAE,4GAnBhC,sCAA2B,OAmBgC;AAjB7D,2CAAqD;AACrD,mDAAuD;AAEvD,+DAAoE;AAEpE,0EAA0E;AAE1E,8DAA8D;AAC9D,IAAM,aAAa,GAAG,UAAC,SAAiB;IACtC,OAAA,CACE,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,EAAE,IAAI,EAAE,CACf,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AANnB,CAMmB,CAAA;AASd,IAAM,kCAAkC,GAAG,UAAC,MAA+B;IAChF,OAAO,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,gBAAgB,CAAA,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,CAAA,CAAA;AAC3D,CAAC,CAAA;AAFY,QAAA,kCAAkC,sCAE9C;AAEM,IAAM,yBAAyB,GAAG,UACvC,IAAoB,EACpB,MAAgC;IAEhC,yDAAyD;IACzD,IAAI,IAAI,KAAK,UAAU,IAAI,MAAM,IAAI,IAAA,0CAAkC,EAAC,MAAM,CAAC,EAAE;QAC/E,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAA;KACpD;IAED,IAAM,aAAa,GAA0D;QAC3E,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE;QAC/D,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACxD,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACvD,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QAC1D,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QAC/D,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QAC1D,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACzD,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACtD,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACtD,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACnE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,oBAAoB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACxE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE;QAC7D,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,uBAAuB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACzE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QAC/D,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;QACpD,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE;QACpE,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;QACpD,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;KACvD,CAAA;IAED,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC,CAAA;AA/BY,QAAA,yBAAyB,6BA+BrC;AAED,SAAgB,yBAAyB,CACvC,UAA0B,EAC1B,SAAiB,EACjB,gBAA6C;IAA7C,iCAAA,EAAA,qBAA6C;IAE7C,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QACjD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;KAC3E;IAEO,IAAA,IAAI,GAAa,UAAU,KAAvB,EAAE,MAAM,GAAK,UAAU,OAAf,CAAe;IAEnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;QACrC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;KAC9E;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC,sDAA+C,IAAI,CAAE,CAAC,CAAA;KACvE;IAED,IAAI;QACF,QAAQ,IAAI,EAAE;YACZ,KAAK,YAAY,CAAC;YAClB,KAAK,aAAa,CAAC,CAAC;gBAClB,IAAM,UAAU,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,2DAAoD,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACxF;gBACD,OAAO,IAAA,oCAAyB,EAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;aACzF;YAED,KAAK,OAAO,CAAC;YACb,KAAK,MAAM,CAAC,CAAC;gBACX,IAAM,UAAU,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,+CAAwC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC5E;gBACD,OAAO,IAAA,+BAAoB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAC/C;YAED,KAAK,SAAS,CAAC,CAAC;gBACd,IAAM,UAAU,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,4CAAqC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACzE;gBACD,OAAO,IAAA,iCAAsB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACjD;YAED,KAAK,iBAAiB,CAAC,CAAC;gBACtB,IAAM,UAAU,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,oDAA6C,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACjF;gBACD,OAAO,IAAA,kCAAuB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAClD;YAED,KAAK,SAAS,CAAC,CAAC;gBACd,IAAM,UAAU,GAAG,IAAA,gCAAqB,EAAC,MAAM,CAAC,CAAA;gBAChD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,4CAAqC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACzE;gBACD,OAAO,IAAA,iCAAsB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACjD;YAED,KAAK,OAAO,CAAC,CAAC;gBACZ,IAAM,UAAU,GAAG,IAAA,8BAAmB,EAAC,MAAM,CAAC,CAAA;gBAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,0CAAmC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACvE;gBACD,OAAO,IAAA,+BAAoB,EAAC,MAAM,CAAC,CAAA;aACpC;YAED,KAAK,WAAW,CAAC,CAAC;gBAChB,IAAM,UAAU,GAAG,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAA;gBAClD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,8CAAuC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC3E;gBACD,OAAO,IAAA,mCAAwB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACnD;YAED,KAAK,YAAY,CAAC,CAAC;gBACjB,IAAM,UAAU,GAAG,IAAA,mCAAwB,EAAC,MAAM,CAAC,CAAA;gBACnD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,+CAAwC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC5E;gBACD,OAAO,IAAA,oCAAyB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACpD;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,IAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,6CAAsC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC1E;gBACD,OAAO,IAAA,kCAAuB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAClD;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,uFAAuF;gBACvF,IAAI,IAAA,0CAAkC,EAAC,MAAM,CAAC,EAAE;oBAC9C,IAAM,YAAY,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;oBACnD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;wBACzB,MAAM,IAAI,KAAK,CACb,mEAA4D,YAAY,CAAC,KAAK,CAAE,CACjF,CAAA;qBACF;oBACD,OAAO,IAAA,oCAAyB,EAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;iBACzF;gBAED,IAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,6CAAsC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC1E;gBACD,OAAO,IAAA,kCAAuB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAClD;YAED,KAAK,OAAO,CAAC,CAAC;gBACZ,IAAM,UAAU,GAAG,IAAA,8BAAmB,EAAC,MAAM,CAAC,CAAA;gBAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,0CAAmC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACvE;gBACD,OAAO,IAAA,+BAAoB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAC/C;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,IAAM,UAAU,GAAG,IAAA,gCAAqB,EAAC,MAAM,CAAC,CAAA;gBAChD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,6CAAsC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC1E;gBACD,OAAO,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;aACtC;YAED,KAAK,YAAY,CAAC,CAAC;gBACjB,IAAM,UAAU,GAAG,IAAA,mCAAwB,EAAC,MAAM,CAAC,CAAA;gBACnD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,+CAAwC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC5E;gBACD,OAAO,IAAA,oCAAyB,EAAC,MAAM,CAAC,CAAA;aACzC;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,IAAM,UAAU,GAAG,IAAA,4BAAiB,EAAC,MAAM,CAAC,CAAA;gBAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,wCAAiC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACrE;gBACD,OAAO,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;aACtC;YAED,KAAK,eAAe,CAAC,CAAC;gBACpB,IAAM,UAAU,GAAG,IAAA,qCAA0B,EAAC,MAAM,CAAC,CAAA;gBACrD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,kDAA2C,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC/E;gBACD,OAAO,IAAA,sCAA2B,EAAC,MAAM,CAAC,CAAA;aAC3C;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,IAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,6CAAsC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC1E;gBACD,OAAO,IAAA,kCAAuB,EAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;aACpE;YAED;gBACE,MAAM,IAAI,KAAK,CAAC,wCAAiC,IAAI,CAAE,CAAC,CAAA;SAC3D;KACF;IAAC,OAAO,KAAK,EAAE;QACd,6BAA6B;QAC7B,IAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;QAC7E,MAAM,IAAI,KAAK,CAAC,yCAAkC,IAAI,eAAK,YAAY,CAAE,CAAC,CAAA;KAC3E;AACH,CAAC;AA1KD,8DA0KC;AAED;;;GAGG;AACH,SAAgB,iCAAiC,CAC/C,UAA0B,EAC1B,SAAiB,EACjB,UAA2B,EAC3B,gBAA6C,EAC7C,YAA2C;IAF3C,2BAAA,EAAA,kBAA2B;IAC3B,iCAAA,EAAA,qBAA6C;IAG7C,IAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAErF,uDAAuD;IACvD,0FAA0F;IAC1F,qEAAqE;IAErE,0EAA0E;IAC1E,IAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CACpC,uCAAuC,EACvC,wBAAwB,CACzB,CAAA;IAED,+DAA+D;IAC/D,IAAM,WAAW,GAAG,kBAAkB,CAAA;IACtC,IAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;IACpD,IAAM,qBAAqB,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAEzE,sDAAsD;IACtD,IAAM,gBAAgB,GAAG,IAAA,qCAAoB,EAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACpE,IAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;IAC9D,IAAM,0BAA0B,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAEnF,kCAAkC;IAClC,IAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,iCAAK,OAAO,SAAK,YAAY,QAAE,CAAC,CAAA;IAErE,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,2BAA2B;IAC3B,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,8BAA8B;IAC9B,IAAM,aAAa,GAAG,YAAY;QAChC,CAAC,CAAC,uCAAgC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,qBAAkB;QACjF,CAAC,CAAC,EAAE,CAAA;IACN,6EAA6E;IAC7E,4DAA4D;IAC5D,IAAM,iBAAiB,GAAG,WAAW,CAAC,OAAO,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC,CAAA;IAEvF,IAAM,WAAW,GAAG,YAAY;QAC9B,CAAC,CAAC,kCACkB,IAAI,CAAC,SAAS,CAAC;YAC/B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,GAAG,EAAE,YAAY,CAAC,UAAU;YAC5B,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC;YAClC,GAAG,EAAE,YAAY,CAAC,oBAAoB,IAAI,CAAC;SAC5C,CAAC,sCACiB,IAAI,CAAC,SAAS,CAAC;YAChC,KAAK,EAAE,2BAAS,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC;YAClD,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,mDAAmD;YACnD,YAAY,EAAE,YAAY,CAAC,KAAK;YAChC,GAAG,EAAE,YAAY,CAAC,UAAU;YAC5B,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,CAAC;YAClC,GAAG,EAAE,YAAY,CAAC,oBAAoB,IAAI,CAAC;SAC5C,CAAC,iBAGN,iBAAiB;YACf,CAAC,CAAC,wQAGsB,IAAI,CAAC,SAAS,CAClC,IAAA,yCAAoB,EAAC,SAAS,kCACzB,6BAAW,CAAC,gBAAgB,SAC5B,MAAM,CAAC,IAAI,CAAC,6BAAW,CAAC,kBAAkB,CAAC,QAC9C,CACH,iSAIoB,IAAI,CAAC,SAAS,CACjC,6BAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAC5E,ioBAgB0D;YAC7D,CAAC,CAAC,yHACuD,OAE5D;QACG,CAAC,CAAC,EAAE,CAAA;IAEN,IAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAA;IAChE,IAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAA;IAEhE,mDAAmD;IACnD,6DAA6D;IAC7D,EAAE;IACF,8EAA8E;IAC9E,wEAAwE;IACxE,4EAA4E;IAC5E,IAAM,OAAO,GAAG,CAAC,YAAY;QAC3B,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,kHACoD;QACxD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,yBAAkB,aAAa,CAAE;YACnC,CAAC,CAAC,0CAAmC,aAAa,0BAAgB,WAAW,8EAC9B,aAAa,yBAAe,WAAW,OAAI,CAAA;IAE5F,OAAO,UAAG,gCAAI,UAAU,UAAE,aAAa,UAAE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mkCAgC3D,aAAa,6gBA0Bb,WAAW,0LASnB,0BAA0B,iBAE1B,qBAAqB,eACrB,WAAW,eACX,OAAO,OACR,CAAA;AACD,CAAC;AAvMD,8EAuMC"}
+{"version":3,"file":"data-source-fetchers.js","sourceRoot":"","sources":["../../src/data-source-fetchers.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AACA,uCA+BmB;AAuBV,wGAzBP,kCAAuB,OAyBO;AAAE,4GAxBhC,sCAA2B,OAwBgC;AAtB7D,2CAAqD;AACrD,mDAAuD;AAEvD,+DAAkF;AAElF,0EAA0E;AAC1E,4EAG6C;AAC7C,0EAA8D;AAE9D,8DAA8D;AAC9D,IAAM,aAAa,GAAG,UAAC,SAAiB;IACtC,OAAA,CACE,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,EAAE,IAAI,EAAE,CACf,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AANnB,CAMmB,CAAA;AASd,IAAM,kCAAkC,GAAG,UAAC,MAA+B;IAChF,OAAO,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,gBAAgB,CAAA,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,CAAA,CAAA;AAC3D,CAAC,CAAA;AAFY,QAAA,kCAAkC,sCAE9C;AAEM,IAAM,yBAAyB,GAAG,UACvC,IAAoB,EACpB,MAAgC;IAEhC,yDAAyD;IACzD,IAAI,IAAI,KAAK,UAAU,IAAI,MAAM,IAAI,IAAA,0CAAkC,EAAC,MAAM,CAAC,EAAE;QAC/E,OAAO,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,CAAA;KACpD;IAED,IAAM,aAAa,GAA0D;QAC3E,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE;QAC/D,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACxD,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACvD,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QAC1D,iBAAiB,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QAC/D,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QAC1D,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACzD,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACtD,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACtD,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACnE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,oBAAoB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACxE,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE;QAC7D,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,uBAAuB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QACzE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;QAC/D,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;QACpD,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE;QACpE,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;QACpD,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE;KACvD,CAAA;IAED,OAAO,aAAa,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC,CAAA;AA/BY,QAAA,yBAAyB,6BA+BrC;AAED;;;;GAIG;AACH,IAAM,kBAAkB,GAAG,UAAC,UAA0B;IACpD,OAAA,UAAU,CAAC,IAAI,KAAK,UAAU;QAC9B,UAAU,CAAC,IAAI,KAAK,YAAY;QAChC,UAAU,CAAC,IAAI,KAAK,aAAa;QACjC,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,IAAA,0CAAkC,EAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAHzF,CAGyF,CAAA;AAE3F;;;GAGG;AACH,SAAgB,yBAAyB,CACvC,UAA0B,EAC1B,SAAiB,EACjB,gBAA6C;IAA7C,iCAAA,EAAA,qBAA6C;IAE7C,IAAM,aAAa,GAAG,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC9E,IAAM,UAAU,GAAG,qBAAqB,CAAC,UAAU,EAAE,SAAS,wBACzD,gBAAgB,KACnB,aAAa,eAAA,IACb,CAAA;IACF,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE;QAClC,OAAO,UAAU,CAAA;KAClB;IACD,OAAO,IAAA,+CAAyB,EAAC,UAAU,EAAE;QAC3C,SAAS,WAAA;QACT,cAAc,EAAE,UAAU,CAAC,IAAI;QAC/B,QAAQ,EAAE,aAAa;QACvB,kBAAkB,EAAE,gBAAgB,CAAC,kBAAkB,IAAI,EAAE;QAC7D,MAAM,EAAE,IAAA,6BAAQ,EAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC;QAC9C,MAAM,EAAE,gBAAgB;KACzB,CAAC,CAAA;AACJ,CAAC;AArBD,8DAqBC;AAED,2FAA2F;AAC3F,IAAM,eAAe,GAAG,UACtB,UAA0B,EAC1B,SAAiB,EACjB,gBAAwC;IAExC,OAAA,gBAAgB,CAAC,aAAa;QAC9B,8BAAY,CAAC,eAAe,CAAC,gBAAgB,CAAC,YAAY,EAAE;YAC1D,SAAS,WAAA;YACT,YAAY,EAAE,UAAU,IAAI,UAAU,CAAC,EAAE;YACzC,cAAc,EAAE,UAAU,IAAI,UAAU,CAAC,IAAI;SAC9C,CAAC;AALF,CAKE,CAAA;AAEJ,SAAS,qBAAqB,CAC5B,UAA0B,EAC1B,SAAiB,EACjB,gBAA6C;IAA7C,iCAAA,EAAA,qBAA6C;IAE7C,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QACjD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;KAC3E;IAEO,IAAA,IAAI,GAAa,UAAU,KAAvB,EAAE,MAAM,GAAK,UAAU,OAAf,CAAe;IAEnC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;QACrC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;KAC9E;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC,sDAA+C,IAAI,CAAE,CAAC,CAAA;KACvE;IAED,IAAI;QACF,QAAQ,IAAI,EAAE;YACZ,KAAK,YAAY,CAAC;YAClB,KAAK,aAAa,CAAC,CAAC;gBAClB,IAAM,UAAU,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,2DAAoD,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACxF;gBACD,OAAO,IAAA,oCAAyB,EAC9B,MAAM,EACN,SAAS,EACT,gBAAgB,CAAC,kBAAkB,EACnC,gBAAgB,CAAC,YAAY,EAC7B,gBAAgB,CAAC,aAAa,EAC9B,gBAAgB,CACjB,CAAA;aACF;YAED,KAAK,OAAO,CAAC;YACb,KAAK,MAAM,CAAC,CAAC;gBACX,IAAM,UAAU,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,+CAAwC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC5E;gBACD,OAAO,IAAA,+BAAoB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAC/C;YAED,KAAK,SAAS,CAAC,CAAC;gBACd,IAAM,UAAU,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,4CAAqC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACzE;gBACD,OAAO,IAAA,iCAAsB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACjD;YAED,KAAK,iBAAiB,CAAC,CAAC;gBACtB,IAAM,UAAU,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,oDAA6C,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACjF;gBACD,OAAO,IAAA,kCAAuB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAClD;YAED,KAAK,SAAS,CAAC,CAAC;gBACd,IAAM,UAAU,GAAG,IAAA,gCAAqB,EAAC,MAAM,CAAC,CAAA;gBAChD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,4CAAqC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACzE;gBACD,OAAO,IAAA,iCAAsB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACjD;YAED,KAAK,OAAO,CAAC,CAAC;gBACZ,IAAM,UAAU,GAAG,IAAA,8BAAmB,EAAC,MAAM,CAAC,CAAA;gBAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,0CAAmC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACvE;gBACD,OAAO,IAAA,+BAAoB,EAAC,MAAM,CAAC,CAAA;aACpC;YAED,KAAK,WAAW,CAAC,CAAC;gBAChB,IAAM,UAAU,GAAG,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAA;gBAClD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,8CAAuC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC3E;gBACD,OAAO,IAAA,mCAAwB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACnD;YAED,KAAK,YAAY,CAAC,CAAC;gBACjB,IAAM,UAAU,GAAG,IAAA,mCAAwB,EAAC,MAAM,CAAC,CAAA;gBACnD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,+CAAwC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC5E;gBACD,OAAO,IAAA,oCAAyB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aACpD;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,IAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,6CAAsC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC1E;gBACD,OAAO,IAAA,kCAAuB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAClD;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,uFAAuF;gBACvF,IAAI,IAAA,0CAAkC,EAAC,MAAM,CAAC,EAAE;oBAC9C,IAAM,YAAY,GAAG,IAAA,mCAAsB,EAAC,MAAM,CAAC,CAAA;oBACnD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;wBACzB,MAAM,IAAI,KAAK,CACb,mEAA4D,YAAY,CAAC,KAAK,CAAE,CACjF,CAAA;qBACF;oBACD,OAAO,IAAA,oCAAyB,EAC9B,MAAM,EACN,SAAS,EACT,gBAAgB,CAAC,kBAAkB,EACnC,gBAAgB,CAAC,YAAY,EAC7B,gBAAgB,CAAC,aAAa,EAC9B,gBAAgB,CACjB,CAAA;iBACF;gBAED,IAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,6CAAsC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC1E;gBACD,OAAO,IAAA,kCAAuB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAClD;YAED,KAAK,OAAO,CAAC,CAAC;gBACZ,IAAM,UAAU,GAAG,IAAA,8BAAmB,EAAC,MAAM,CAAC,CAAA;gBAC9C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,0CAAmC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACvE;gBACD,OAAO,IAAA,+BAAoB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAA;aAC/C;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,IAAM,UAAU,GAAG,IAAA,gCAAqB,EAAC,MAAM,CAAC,CAAA;gBAChD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,6CAAsC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC1E;gBACD,OAAO,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;aACtC;YAED,KAAK,YAAY,CAAC,CAAC;gBACjB,IAAM,UAAU,GAAG,IAAA,mCAAwB,EAAC,MAAM,CAAC,CAAA;gBACnD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,+CAAwC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC5E;gBACD,OAAO,IAAA,oCAAyB,EAAC,MAAM,CAAC,CAAA;aACzC;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,IAAM,UAAU,GAAG,IAAA,4BAAiB,EAAC,MAAM,CAAC,CAAA;gBAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,wCAAiC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBACrE;gBACD,OAAO,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;aACtC;YAED,KAAK,eAAe,CAAC,CAAC;gBACpB,IAAM,UAAU,GAAG,IAAA,qCAA0B,EAAC,MAAM,CAAC,CAAA;gBACrD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,kDAA2C,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC/E;gBACD,OAAO,IAAA,sCAA2B,EAAC,MAAM,CAAC,CAAA;aAC3C;YAED,KAAK,UAAU,CAAC,CAAC;gBACf,IAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,MAAM,CAAC,CAAA;gBACjD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE;oBACvB,MAAM,IAAI,KAAK,CAAC,6CAAsC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAA;iBAC1E;gBACD,OAAO,IAAA,kCAAuB,EAAC,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;aACpE;YAED;gBACE,MAAM,IAAI,KAAK,CAAC,wCAAiC,IAAI,CAAE,CAAC,CAAA;SAC3D;KACF;IAAC,OAAO,KAAK,EAAE;QACd,6BAA6B;QAC7B,IAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAA;QAC7E,MAAM,IAAI,KAAK,CAAC,yCAAkC,IAAI,eAAK,YAAY,CAAE,CAAC,CAAA;KAC3E;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,iCAAiC,CAC/C,UAA0B,EAC1B,SAAiB,EACjB,UAA2B,EAC3B,gBAA6C,EAC7C,YAA2C;IAF3C,2BAAA,EAAA,kBAA2B;IAC3B,iCAAA,EAAA,qBAA6C;IAG7C,2EAA2E;IAC3E,kEAAkE;IAClE,IAAM,aAAa,GAAG,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC9E,IAAM,iBAAiB,GACrB,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,UAAU,IAAI,CAAC,CAAC,aAAa,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM;QAC1F,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,SAAS,CAAA;IACf,IAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAErF,uDAAuD;IACvD,0FAA0F;IAC1F,qEAAqE;IAErE,0EAA0E;IAC1E,IAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CACpC,uCAAuC,EACvC,wBAAwB,CACzB,CAAA;IAED,+DAA+D;IAC/D,IAAM,WAAW,GAAG,kBAAkB,CAAA;IACtC,IAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;IACpD,IAAM,qBAAqB,GAAG,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAEzE,4EAA4E;IAC5E,gDAAgD;IAChD,IAAM,eAAe,GAAG,IAAA,qCAAoB,EAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACnE,IAAM,gBAAgB,GAAG,kBAAkB,CAAC,UAAU,CAAC;QACrD,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,IAAA,8CAAwB,EAAC,eAAe,CAAC,CAAA;IAC7C,IAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAA;IAC9D,IAAM,0BAA0B,GAAG,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAEnF,kCAAkC;IAClC,IAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,iCAAK,OAAO,SAAK,YAAY,QAAE,CAAC,CAAA;IAErE,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,2BAA2B;IAC3B,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,8BAA8B;IAC9B,IAAM,aAAa,GAAG,iBAAiB;QACrC,CAAC,CAAC,uCAAgC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,qBAAkB;QACjF,CAAC,CAAC,EAAE,CAAA;IACN,6EAA6E;IAC7E,4DAA4D;IAC5D,IAAM,iBAAiB,GAAG,WAAW,CAAC,OAAO,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC,CAAA;IACvF,6EAA6E;IAC7E,0EAA0E;IAC1E,gEAAgE;IAChE,IAAM,aAAa,GAAG,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IAC9E,IAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAA;IAC1C,IAAM,kBAAkB,GAAG,UAAC,OAA2B;QACrD,OAAA,aAAa,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAAhC,CAAgC,CAAA;IAElC,IAAM,WAAW,GAAG,iBAAiB;QACnC,CAAC,CAAC,kCACkB,IAAI,CAAC,SAAS,CAAC;YAC/B,KAAK,EAAE,iBAAiB,CAAC,KAAK;YAC9B,GAAG,EAAE,iBAAiB,CAAC,UAAU;YACjC,OAAO,EAAE,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC;YACtD,GAAG,EAAE,kBAAkB,CAAC,iBAAiB,CAAC,oBAAoB,CAAC;SAChE,CAAC,sCACiB,IAAI,CAAC,SAAS,CAAC;YAChC,KAAK,EAAE,2BAAS,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACvD,wEAAwE;YACxE,wEAAwE;YACxE,qEAAqE;YACrE,mDAAmD;YACnD,YAAY,EAAE,iBAAiB,CAAC,KAAK;YACrC,GAAG,EAAE,iBAAiB,CAAC,UAAU;YACjC,OAAO,EAAE,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC;YACtD,GAAG,EAAE,kBAAkB,CAAC,iBAAiB,CAAC,oBAAoB,CAAC;SAChE,CAAC,iBAGN,iBAAiB;YACf,CAAC,CAAC,wQAGsB,IAAI,CAAC,SAAS,CAClC,IAAA,yCAAoB,EAAC,SAAS,kCACzB,6BAAW,CAAC,gBAAgB,SAC5B,MAAM,CAAC,IAAI,CAAC,6BAAW,CAAC,kBAAkB,CAAC,QAC9C,CACH,iSAIoB,IAAI,CAAC,SAAS,CACjC,6BAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAC5E,w5BAwBL,aAAa;gBACX,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,gbAYL,qCAGO,aAAa;gBACX,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,4DAA4D,sCAGhE,aAAa;gBACX,CAAC,CAAC,2CAA2C;gBAC7C,CAAC,CAAC,8DAA8D,CAClE;YACJ,CAAC,CAAC,yHACuD,OAE5D;QACG,CAAC,CAAC,EAAE,CAAA;IAEN,IAAM,aAAa,GAAG,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAA;IACrE,IAAM,WAAW,GAAG,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAA;IAErE,mDAAmD;IACnD,6DAA6D;IAC7D,EAAE;IACF,8EAA8E;IAC9E,wEAAwE;IACxE,4EAA4E;IAC5E,IAAM,OAAO,GAAG,CAAC,iBAAiB;QAChC,CAAC,CAAC,UAAU;YACV,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,kHACoD;QACxD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,yBAAkB,aAAa,CAAE;YACnC,CAAC,CAAC,0CAAmC,aAAa,0BAAgB,WAAW,8EAC9B,aAAa,yBAAe,WAAW,OAAI,CAAA;IAE5F,OAAO,UAAG,gCAAI,UAAU,UAAE,aAAa,UAAE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mkCAgC3D,aAAa,6gBA0Bb,WAAW,0LASnB,0BAA0B,iBAE1B,qBAAqB,eACrB,WAAW,eACX,OAAO,OACR,CAAA;AACD,CAAC;AA1PD,8EA0PC"}

package/dist/cjs/fetchers/postgresql.d.ts

@@ -1,3 +1,5 @@
-export declare const generatePostgreSQLFetcher: (config: Record<string, unknown>, tableName: string, trustedReaderRoles?: ReadonlyArray<string>) => string;
+import type { DataReadExposure, ProjectDataExposure } from '@teleporthq/teleport-types';
+import { SessionReaderPlacement } from './utils/table-access-guard';
+export declare const generatePostgreSQLFetcher: (config: Record<string, unknown>, tableName: string, trustedReaderRoles?: ReadonlyArray<string>, dataExposure?: ProjectDataExposure, routeExposure?: DataReadExposure, reader?: SessionReaderPlacement) => string;
 export declare const generatePostgreSQLCountFetcher: (config: Record<string, unknown>, tableName: string) => string;
 //# sourceMappingURL=postgresql.d.ts.map

package/dist/cjs/fetchers/postgresql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"postgresql.d.ts","sourceRoot":"","sources":["../../../src/fetchers/postgresql.ts"],"names":[],"mappings":"AA8BA,eAAO,MAAM,yBAAyB,WAC5B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,uBACG,cAAc,MAAM,CAAC,KACxC,MA8SF,CAAA;AAED,eAAO,MAAM,8BAA8B,WACjC,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MA8FF,CAAA"}
+{"version":3,"file":"postgresql.d.ts","sourceRoot":"","sources":["../../../src/fetchers/postgresql.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAEvF,OAAO,EAGL,sBAAsB,EAEvB,MAAM,4BAA4B,CAAA;AAmBnC,eAAO,MAAM,yBAAyB,WAC5B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,uBACG,cAAc,MAAM,CAAC,iBAE1B,mBAAmB,kBAElB,gBAAgB,WAExB,sBAAsB,KAC7B,MA6TF,CAAA;AAED,eAAO,MAAM,8BAA8B,WACjC,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MA+FF,CAAA"}