@teleporthq/teleport-plugin-next-data-source 0.44.15 → 0.45.0

package/dist/cjs/fetchers/postgresql.js

@@ -6,14 +6,22 @@ var product_price_sort_1 = require("../product-price-sort");
 var list_sort_order_1 = require("../list-sort-order");
 var row_order_1 = require("../row-order");
 var product_filter_fields_1 = require("../product-filter-fields");
+var teleport_shared_1 = require("@teleporthq/teleport-shared");
 var table_access_guard_1 = require("./utils/table-access-guard");
 var search_relevance_1 = require("../search-relevance");
 var request_sql_guards_1 = require("./utils/request-sql-guards");
 var array_overlap_sql_1 = require("../array-overlap-sql");
 var pg_client_import_1 = require("./pg-client-import");
-var generatePostgreSQLFetcher = function (config, tableName, trustedReaderRoles) {
+var generatePostgreSQLFetcher = function (config, tableName, trustedReaderRoles, 
+// Who may read the table from a browser — see DataExposure.readExposureFor.
+dataExposure, 
+// The route's own exposure, already resolved for its data source (preferred).
+routeExposure, 
+// Where the route sits and whether its session reader checks revocation.
+reader) {
     var _a;
     if (trustedReaderRoles === void 0) { trustedReaderRoles = []; }
+    if (reader === void 0) { reader = {}; }
     var pgConfig = config;
     var schema = (_a = pgConfig.options) === null || _a === void 0 ? void 0 : _a.schema;
     var clientConfig = pgConfig.connectionString
@@ -23,7 +31,7 @@ var generatePostgreSQLFetcher = function (config, tableName, trustedReaderRoles)
             : pgConfig.sslConfig
                 ? "{\n      ".concat(pgConfig.sslConfig.ca ? "ca: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.ca), ",") : '', "\n      ").concat(pgConfig.sslConfig.cert ? "cert: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.cert), ",") : '', "\n      ").concat(pgConfig.sslConfig.key ? "key: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.key), ",") : '', "\n      rejectUnauthorized: false\n    }")
                 : '{ rejectUnauthorized: false }', "\n  }");
-    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\n").concat((0, table_access_guard_1.generateTableAccessPreamble)(trustedReaderRoles), "\n\nconst getClient = () => {\n  return new Client(").concat(clientConfig, ")\n}\n\n").concat((0, utils_1.generateSafeJSONParseCode)(), "\n\n").concat((0, utils_1.generateFilterTreeHelpersCode)(), "\n\n").concat((0, utils_1.generateSearchEscapeHelpersCode)(), "\n").concat((0, search_relevance_1.generateSearchSqlHelpersCode)(search_relevance_1.PG_SEARCH_SQL), "\n").concat((0, array_overlap_sql_1.generateArrayOverlapSqlCode)(), "\n\n// Builds one SQL clause for the whole filter tree, so an OR group nested in\n// the root AND keeps its meaning instead of being flattened into ANDs.\n").concat((0, request_sql_guards_1.generateRequestSqlGuardsCode)(), "\nconst processFilters = (filters, conditions, queryParams, paramIndex) => {\n  if (!filters) return paramIndex\n  \n  const filterTree = normalizeFilterTree(safeJSONParse(filters))\n  if (!filterTree) return paramIndex\n  \n  const buildCondition = (condition) => {\n    const field = condition.source\n    const normalizedCondition = normalizeInOperand(condition.operand, condition.destination)\n    if (normalizedCondition === null) return null\n    const value = normalizedCondition.value\n    const operand = normalizedCondition.operand\n    \n    // The products table's virtual fields (effective price, rating bucket,\n    // on-sale flag, variant axes) are whole clauses, not columns - so they are\n    // answered before any branch below can interpolate the field name raw.\n    const productClause = productFilterClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (productClause !== null) return productClause\n    assertRequestColumn(field, 'filter field')\n    \n    if (Array.isArray(value)) {\n      if (value.length === 0) return null\n      if (operand === 'array_overlap') {\n        // The row's list (see array-overlap-sql.ts) shares any value with the set.\n        const clause = arrayOverlapSql([field], '$' + paramIndex)\n        queryParams.push(value.map((entry) => String(entry)))\n        paramIndex++\n        return clause\n      }\n      const placeholders = value.map(() => `$${paramIndex++}`)\n      queryParams.push(...value)\n      return operand === '!='\n        ? `${field} NOT IN (${placeholders.join(', ')})`\n        : `${field} IN (${placeholders.join(', ')})`\n    }\n    \n    if (operand === 'array_overlap') {\n      if (value === '' || value === null || value === undefined) return null\n      // A single comma-joined string (the multi-select Category Filter's\n      // ?categoryFilter=a,b,c) expands to multiple ids; one id stays one.\n      const overlapValues = String(value).split(',').map((entry) => entry.trim()).filter(Boolean)\n      if (overlapValues.length === 0) return null\n      const clause = arrayOverlapSql([field], '$' + paramIndex)\n      queryParams.push(overlapValues)\n      paramIndex++\n      return clause\n    }\n    \n    if (value === null) {\n      if (operand === '=') return `${field} IS NULL`\n      if (operand === '!=') return `${field} IS NOT NULL`\n      return null\n    }\n    \n    const validOps = ['=', '!=', '>', '<', '>=', '<=']\n    const sqlOperator = validOps.includes(operand) ? operand : '='\n    const clause = `${field} ${sqlOperator} $${paramIndex}`\n    queryParams.push(value)\n    paramIndex++\n    return clause\n  }\n  \n  const clause = buildFilterTreeClause(filterTree, buildCondition)\n  if (clause) conditions.push(clause)\n  \n  return paramIndex\n}\n\n").concat((0, utils_1.generateDateFormatterCode)(), "\n\n").concat((0, product_price_sort_1.generateSortFieldSqlHelper)(tableName), "\n\n").concat((0, product_price_sort_1.generateSortFallbackFieldHelper)(tableName), "\n\n").concat((0, row_order_1.generateRowOrderTiebreakHelper)((0, row_order_1.rowIdentityColumn)(config, tableName)), "\n\n").concat((0, product_filter_fields_1.generateProductFilterClauseHelper)(tableName), "\n\nexport default async function handler(req, res) {\n").concat((0, table_access_guard_1.generateReadGuardCall)(tableName, null), "\n  const client = getClient()\n  \n  try {\n    await client.connect()\n    ").concat(schema ? "await client.query('SET search_path TO ".concat(schema, "')") : '', "\n    \n    const { query, queryColumns, limit, page, perPage, sortBy, sortOrder, filters, sorts, offset } = req.query\n    // A visitor never filters, sorts or searches by a column it is not served.\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    \n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    let searchRank = ''\n    let searchFrom = ''\n    \n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        // Use specified columns. Wrap non-arrays so that a single\n        // column passed as a bare string doesn't get iterated as chars.\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : (parsed ? [parsed] : [])\n      } else {\n        // Fallback: Get all columns from information_schema\n        try {\n          const schemaQuery = `\n            SELECT column_name\n            FROM information_schema.columns\n            WHERE table_name = $1\n            ").concat(schema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = schema \n            ? [").concat(JSON.stringify(tableName), ", ").concat(JSON.stringify(schema), "]\n            : [").concat(JSON.stringify(tableName), "]\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          columns = schemaResult.rows.map(row => row.column_name)\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n          // Continue without search if we can't get columns\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      const search = buildSearchSql(query, columns, paramIndex)\n      if (search) {\n        conditions.push(search.where)\n        queryParams.push(...search.params)\n        paramIndex = search.nextIndex\n        searchRank = search.rank\n        searchFrom = search.from\n      }\n    }\n\n    // Apply filters using helper function\n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n    \n    // A search's worked-out texts stay out of the rows: only the table's own columns.\n    let sql = `SELECT ${searchFrom ? '\"").concat(tableName, "\".*' : '*'} FROM \"").concat(tableName, "\"${searchFrom}`\n    \n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`\n    }\n    \n    // Handle sorts - new array format. Two ORDER BY clauses are built: the one\n    // actually used (the products table's price rewrites, rows without a value\n    // last), and a plain-column twin kept only as the fallback below.\n    // A search orders its matches by where the words are first; the sort\n    // orders the rows within each of those groups.\n    let orderBySql = ''\n    let plainOrderBySql = ''\n    const searchOrder = searchRank ? searchRank + ', ' : ''\n    if (sorts) {\n      const parsedSorts = safeJSONParse(sorts)\n      if (Array.isArray(parsedSorts) && parsedSorts.length > 0) {\n        const valid = parsedSorts.filter((sort) => sort && sort.field)\n        valid.forEach((sort) => assertRequestColumn(sort.field, 'sort field'))\n        const orderOf = (sort) => (sort.order || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n        const orderClauses = valid.map((sort) => `${sortFieldSql(sort.field)} ${orderOf(sort)}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "`)\n        const plainClauses = valid.map((sort) => `${sortFallbackField(sort.field)} ${orderOf(sort)}`)\n\n        if (orderClauses.length > 0) {\n          // The row's own key last, so equal rows can't repeat across pages\n          // or vanish between them.\n          const tiebreak = rowOrderTiebreak(valid.map((sort) => sort.field), orderOf(valid[valid.length - 1]))\n          orderBySql = ` ORDER BY ${searchOrder}${orderClauses.join(', ')}${tiebreak}`\n          plainOrderBySql = ` ORDER BY ${searchOrder}${plainClauses.join(', ')}${tiebreak}`\n        }\n      }\n    } else if (sortBy) {\n      assertRequestColumn(sortBy, 'sort field')\n      const sortByDirection = (sortOrder || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n      const tiebreak = rowOrderTiebreak([sortBy], sortByDirection)\n      orderBySql = ` ORDER BY ${searchOrder}${sortBy} ${sortByDirection}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "${tiebreak}`\n      plainOrderBySql = ` ORDER BY ${searchOrder}${sortBy} ${sortByDirection}${tiebreak}`\n    }\n    if (!orderBySql && searchRank) {\n      orderBySql = plainOrderBySql = ' ORDER BY ' + searchRank + rowOrderTiebreak([], 'ASC')\n    }\n    const usedRewrittenSort = orderBySql !== plainOrderBySql\n\n    const limitValue = requestRowCount(limit || perPage)\n    const offsetValue = offset !== undefined ? parseInt(offset) : (page && perPage ? (parseInt(page) - 1) * parseInt(perPage) : undefined)\n\n    let sqlTail = ''\n    if (limitValue !== undefined) {\n      sqlTail += ` LIMIT ${limitValue}`\n    }\n    \n    if (offsetValue !== undefined) {\n      sqlTail += ` OFFSET ${offsetValue}`\n    }\n\n    const baseSql = sql\n    sql = baseSql + orderBySql + sqlTail\n    \n    // The discount-aware price ordering is an inline sub-select over a JSON\n    // column. It is written to be unraisable, but it runs inside ORDER BY for\n    // the whole table \u2014 so if a database ever rejects it, fall back to ordering\n    // by the stored list price rather than serving an empty products page. The\n    // empty-values-last ordering takes the same exit, for a Postgres-compatible\n    // database that does not know NULLS LAST.\n    let result\n    try {\n      result = await client.query(sql, queryParams)\n    } catch (sortError) {\n      if (!usedRewrittenSort) throw sortError\n      console.warn(\n        'Rewritten sort failed; falling back to the plain column:',\n        sortError && sortError.message\n      )\n      result = await client.query(baseSql + plainOrderBySql + sqlTail, queryParams)\n    }\n    const rows = Array.isArray(result?.rows) ? result.rows : []\n    const plainRows = rows.map((row) =>\n      row && typeof row.toJSON === 'function' ? row.toJSON() : row\n    )\n    const safeData = JSON.parse(JSON.stringify(plainRows, dateReplacer))\n\n    return res.status(200).json({\n      success: true,\n      data: __taWithoutCredentials(\n        __rowPolicy ? __brpStripHidden(__rowPolicy, safeData) : safeData,\n        ").concat(JSON.stringify(tableName), "\n      ),\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('PostgreSQL fetch error:', error)\n    // A database error names tables, columns and values: it stays in the server\n    // log. Only an error this route raised for the caller (it carries a status)\n    // is repeated to it.\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to fetch data',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing PostgreSQL client:', error)\n      }\n    }\n  }\n}\n");
+    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\n").concat((0, table_access_guard_1.generateTableAccessPreamble)(trustedReaderRoles, routeExposure || teleport_shared_1.DataExposure.readExposureFor(dataExposure, { tableName: tableName }), (0, table_access_guard_1.sqlRouteFieldPolicy)(config, tableName), tableName, reader), "\n\n// No query waits on the database longer than this (enforced by the client:\n// a server-side statement_timeout does not survive a pooler).\nconst getClient = () => {\n  return new Client(Object.assign(").concat(clientConfig, ", { query_timeout: ").concat(teleport_shared_1.DataExposure.READ_QUERY_TIMEOUT_MS, " }))\n}\n\n").concat((0, utils_1.generateSafeJSONParseCode)(), "\n\n").concat((0, utils_1.generateFilterTreeHelpersCode)(), "\n\n").concat((0, utils_1.generateSearchEscapeHelpersCode)(), "\n").concat((0, search_relevance_1.generateSearchSqlHelpersCode)(search_relevance_1.PG_SEARCH_SQL), "\n").concat((0, array_overlap_sql_1.generateArrayOverlapSqlCode)(), "\n\n// Builds one SQL clause for the whole filter tree, so an OR group nested in\n// the root AND keeps its meaning instead of being flattened into ANDs.\n").concat((0, request_sql_guards_1.generateRequestSqlGuardsCode)(), "\nconst processFilters = (filters, conditions, queryParams, paramIndex) => {\n  if (!filters) return paramIndex\n  \n  const filterTree = normalizeFilterTree(safeJSONParse(filters))\n  if (!filterTree) return paramIndex\n  \n  const buildCondition = (condition) => {\n    const field = condition.source\n    const normalizedCondition = normalizeInOperand(condition.operand, condition.destination)\n    if (normalizedCondition === null) return null\n    const value = normalizedCondition.value\n    const operand = normalizedCondition.operand\n    \n    // The products table's virtual fields (effective price, rating bucket,\n    // on-sale flag, variant axes) are whole clauses, not columns - so they are\n    // answered before any branch below can interpolate the field name raw.\n    const productClause = productFilterClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (productClause !== null) return productClause\n    assertRequestColumn(field, 'filter field')\n    \n    if (Array.isArray(value)) {\n      if (value.length === 0) return null\n      if (operand === 'array_overlap') {\n        // The row's list (see array-overlap-sql.ts) shares any value with the set.\n        const clause = arrayOverlapSql([field], '$' + paramIndex)\n        queryParams.push(value.map((entry) => String(entry)))\n        paramIndex++\n        return clause\n      }\n      const placeholders = value.map(() => `$${paramIndex++}`)\n      queryParams.push(...value)\n      return operand === '!='\n        ? `${field} NOT IN (${placeholders.join(', ')})`\n        : `${field} IN (${placeholders.join(', ')})`\n    }\n    \n    if (operand === 'array_overlap') {\n      if (value === '' || value === null || value === undefined) return null\n      // A single comma-joined string (the multi-select Category Filter's\n      // ?categoryFilter=a,b,c) expands to multiple ids; one id stays one.\n      const overlapValues = String(value).split(',').map((entry) => entry.trim()).filter(Boolean)\n      if (overlapValues.length === 0) return null\n      const clause = arrayOverlapSql([field], '$' + paramIndex)\n      queryParams.push(overlapValues)\n      paramIndex++\n      return clause\n    }\n    \n    if (value === null) {\n      if (operand === '=') return `${field} IS NULL`\n      if (operand === '!=') return `${field} IS NOT NULL`\n      return null\n    }\n    \n    // 'like' reads a JSON-list cell for one member (a post's former slugs); the\n    // value is a bound parameter, so a pattern never reaches the SQL text.\n    const validOps = ['=', '!=', '>', '<', '>=', '<=', 'like']\n    const sqlOperator = validOps.includes(operand) ? operand : '='\n    const clause = `${field} ${sqlOperator} $${paramIndex}`\n    queryParams.push(value)\n    paramIndex++\n    return clause\n  }\n  \n  const clause = buildFilterTreeClause(filterTree, buildCondition)\n  if (clause) conditions.push(clause)\n  \n  return paramIndex\n}\n\n").concat((0, utils_1.generateDateFormatterCode)(), "\n\n").concat((0, product_price_sort_1.generateSortFieldSqlHelper)(tableName), "\n\n").concat((0, product_price_sort_1.generateSortFallbackFieldHelper)(tableName), "\n\n").concat((0, row_order_1.generateRowOrderTiebreakHelper)((0, row_order_1.rowIdentityColumn)(config, tableName)), "\n\n").concat((0, product_filter_fields_1.generateProductFilterClauseHelper)(tableName), "\n\nexport default async function handler(req, res) {\n").concat((0, table_access_guard_1.generateReadGuardCall)(tableName, null), "\n  const client = getClient()\n  \n  try {\n    await client.connect()\n    ").concat(schema ? "await client.query('SET search_path TO ".concat(schema, "')") : '', "\n    \n    const { query, queryColumns, limit, page, perPage, sortBy, sortOrder, filters, sorts, offset } = req.query\n    // A visitor never filters, sorts or searches by a column it is not served.\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    \n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    let searchRank = ''\n    let searchFrom = ''\n    \n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        // Use specified columns. Wrap non-arrays so that a single\n        // column passed as a bare string doesn't get iterated as chars.\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : (parsed ? [parsed] : [])\n      } else {\n        // Fallback: Get all columns from information_schema\n        try {\n          const schemaQuery = `\n            SELECT column_name\n            FROM information_schema.columns\n            WHERE table_name = $1\n            ").concat(schema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = schema \n            ? [").concat(JSON.stringify(tableName), ", ").concat(JSON.stringify(schema), "]\n            : [").concat(JSON.stringify(tableName), "]\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          // A credential column is never searched: a search is an oracle for it.\n          columns = schemaResult.rows.map(row => row.column_name).filter((column) => !__taIsCredentialColumn(column))\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n          // Continue without search if we can't get columns\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      const search = buildSearchSql(query, columns, paramIndex)\n      if (search) {\n        conditions.push(search.where)\n        queryParams.push(...search.params)\n        paramIndex = search.nextIndex\n        searchRank = search.rank\n        searchFrom = search.from\n      }\n    }\n\n    // Apply filters using helper function\n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n    \n    // A search's worked-out texts stay out of the rows: only the table's own columns.\n    let sql = `SELECT ${searchFrom ? '\"").concat(tableName, "\".*' : '*'} FROM \"").concat(tableName, "\"${searchFrom}`\n    \n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`\n    }\n    \n    // Handle sorts - new array format. Two ORDER BY clauses are built: the one\n    // actually used (the products table's price rewrites, rows without a value\n    // last), and a plain-column twin kept only as the fallback below.\n    // A search orders its matches by where the words are first; the sort\n    // orders the rows within each of those groups.\n    let orderBySql = ''\n    let plainOrderBySql = ''\n    const searchOrder = searchRank ? searchRank + ', ' : ''\n    if (sorts) {\n      const parsedSorts = safeJSONParse(sorts)\n      if (Array.isArray(parsedSorts) && parsedSorts.length > 0) {\n        const valid = parsedSorts.filter((sort) => sort && sort.field)\n        valid.forEach((sort) => assertRequestColumn(sort.field, 'sort field'))\n        const orderOf = (sort) => (sort.order || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n        const orderClauses = valid.map((sort) => `${sortFieldSql(sort.field)} ${orderOf(sort)}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "`)\n        const plainClauses = valid.map((sort) => `${sortFallbackField(sort.field)} ${orderOf(sort)}`)\n\n        if (orderClauses.length > 0) {\n          // The row's own key last, so equal rows can't repeat across pages\n          // or vanish between them.\n          const tiebreak = rowOrderTiebreak(valid.map((sort) => sort.field), orderOf(valid[valid.length - 1]))\n          orderBySql = ` ORDER BY ${searchOrder}${orderClauses.join(', ')}${tiebreak}`\n          plainOrderBySql = ` ORDER BY ${searchOrder}${plainClauses.join(', ')}${tiebreak}`\n        }\n      }\n    } else if (sortBy) {\n      assertRequestColumn(sortBy, 'sort field')\n      const sortByDirection = (sortOrder || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n      const tiebreak = rowOrderTiebreak([sortBy], sortByDirection)\n      orderBySql = ` ORDER BY ${searchOrder}${sortBy} ${sortByDirection}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "${tiebreak}`\n      plainOrderBySql = ` ORDER BY ${searchOrder}${sortBy} ${sortByDirection}${tiebreak}`\n    }\n    if (!orderBySql && searchRank) {\n      orderBySql = plainOrderBySql = ' ORDER BY ' + searchRank + rowOrderTiebreak([], 'ASC')\n    }\n    const usedRewrittenSort = orderBySql !== plainOrderBySql\n\n    // Whole numbers only, and a browser's read capped - see __taReadWindow.\n    const __window = __taReadWindow(req)\n    const limitValue = __window.limit || __window.perPage\n    const offsetValue = __window.offset !== undefined ? __window.offset : (__window.page && __window.perPage ? (__window.page - 1) * __window.perPage : undefined)\n\n    let sqlTail = ''\n    if (limitValue !== undefined) {\n      sqlTail += ` LIMIT ${limitValue}`\n    }\n    \n    if (offsetValue !== undefined) {\n      sqlTail += ` OFFSET ${offsetValue}`\n    }\n\n    const baseSql = sql\n    sql = baseSql + orderBySql + sqlTail\n    \n    // The discount-aware price ordering is an inline sub-select over a JSON\n    // column. It is written to be unraisable, but it runs inside ORDER BY for\n    // the whole table \u2014 so if a database ever rejects it, fall back to ordering\n    // by the stored list price rather than serving an empty products page. The\n    // empty-values-last ordering takes the same exit, for a Postgres-compatible\n    // database that does not know NULLS LAST.\n    let result\n    try {\n      result = await client.query(sql, queryParams)\n    } catch (sortError) {\n      if (!usedRewrittenSort) throw sortError\n      console.warn(\n        'Rewritten sort failed; falling back to the plain column:',\n        sortError && sortError.message\n      )\n      result = await client.query(baseSql + plainOrderBySql + sqlTail, queryParams)\n    }\n    const rows = Array.isArray(result?.rows) ? result.rows : []\n    const plainRows = rows.map((row) =>\n      row && typeof row.toJSON === 'function' ? row.toJSON() : row\n    )\n    const safeData = JSON.parse(JSON.stringify(plainRows, dateReplacer))\n\n    return res.status(200).json({\n      success: true,\n      data: __taWithoutCredentials(\n        __rowPolicy ? __brpStripHidden(__rowPolicy, safeData) : safeData,\n        ").concat(JSON.stringify(tableName), "\n      ),\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('PostgreSQL fetch error:', error)\n    // A database error names tables, columns and values: it stays in the server\n    // log. Only an error this route raised for the caller (it carries a status)\n    // is repeated to it.\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to fetch data',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing PostgreSQL client:', error)\n      }\n    }\n  }\n}\n");
 };
 exports.generatePostgreSQLFetcher = generatePostgreSQLFetcher;
 var generatePostgreSQLCountFetcher = function (config, tableName) {
@@ -32,7 +40,7 @@ var generatePostgreSQLCountFetcher = function (config, tableName) {
     var hasSchema = !!((_a = pgConfig.options) === null || _a === void 0 ? void 0 : _a.schema);
     return "\nasync function getCount(req, res) {\n".concat((0, table_access_guard_1.generateReadGuardCall)(tableName, null), "\n  const client = getClient()\n\n  try {\n    await client.connect()\n    const { query, queryColumns, filters } = req.query\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    let searchFrom = ''\n\n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        // Use specified columns\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : [parsed]\n      } else {\n        // Fallback: Get all columns from information_schema\n        try {\n          const schemaQuery = `\n            SELECT column_name \n            FROM information_schema.columns \n            WHERE table_name = $1\n            ").concat(hasSchema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = ").concat(hasSchema
         ? "[".concat(JSON.stringify(tableName), ", ").concat(JSON.stringify(pgConfig.options.schema), "]")
-        : "[".concat(JSON.stringify(tableName), "]"), "\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          columns = schemaResult.rows.map(row => row.column_name)\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n          // Continue without search if we can't get columns\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      const search = buildSearchSql(query, columns, paramIndex)\n      if (search) {\n        conditions.push(search.where)\n        queryParams.push(...search.params)\n        paramIndex = search.nextIndex\n        searchFrom = search.from\n      }\n    }\n\n    // Apply filters using helper function\n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n\n    let countSql = `SELECT COUNT(*) FROM \"").concat(tableName, "\"${searchFrom}`\n    if (conditions.length > 0) {\n      countSql += ` WHERE ${conditions.join(' AND ')}`\n    }\n\n    const result = await client.query(countSql, queryParams)\n    const count = parseInt(result.rows[0].count, 10)\n\n    return res.status(200).json({\n      success: true,\n      count: count,\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('Error getting count:', error)\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to get count',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing PostgreSQL client:', error)\n      }\n    }\n  }\n}\n");
+        : "[".concat(JSON.stringify(tableName), "]"), "\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          // A credential column is never searched: a search is an oracle for it.\n          columns = schemaResult.rows.map(row => row.column_name).filter((column) => !__taIsCredentialColumn(column))\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n          // Continue without search if we can't get columns\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      const search = buildSearchSql(query, columns, paramIndex)\n      if (search) {\n        conditions.push(search.where)\n        queryParams.push(...search.params)\n        paramIndex = search.nextIndex\n        searchFrom = search.from\n      }\n    }\n\n    // Apply filters using helper function\n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n\n    let countSql = `SELECT COUNT(*) FROM \"").concat(tableName, "\"${searchFrom}`\n    if (conditions.length > 0) {\n      countSql += ` WHERE ${conditions.join(' AND ')}`\n    }\n\n    const result = await client.query(countSql, queryParams)\n    const count = parseInt(result.rows[0].count, 10)\n\n    return res.status(200).json({\n      success: true,\n      count: count,\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('Error getting count:', error)\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to get count',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing PostgreSQL client:', error)\n      }\n    }\n  }\n}\n");
 };
 exports.generatePostgreSQLCountFetcher = generatePostgreSQLCountFetcher;
 //# sourceMappingURL=postgresql.js.map

package/dist/cjs/fetchers/postgresql.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgresql.js","sourceRoot":"","sources":["../../../src/fetchers/postgresql.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,4DAAmG;AACnG,sDAAwD;AACxD,0CAAgF;AAChF,kEAA4E;AAC5E,iEAA+F;AAC/F,wDAAiF;AACjF,iEAAyE;AACzE,0DAAkE;AAClE,uDAAqD;AAe9C,IAAM,yBAAyB,GAAG,UACvC,MAA+B,EAC/B,SAAiB,EACjB,kBAA8C;;IAA9C,mCAAA,EAAA,uBAA8C;IAE9C,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA;IAEvC,IAAM,YAAY,GAAG,QAAQ,CAAC,gBAAgB;QAC5C,CAAC,CAAC,mCACkB,IAAA,8BAAsB,EAAC,QAAQ,CAAC,gBAAgB,CAAC,WACrE;QACA,CAAC,CAAC,uBACM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAC7B,QAAQ,CAAC,IAAI,IAAI,IAAI,0BACrB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,8BAC9C,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC,8BACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,yBAE3C,QAAQ,CAAC,GAAG,KAAK,KAAK;YACpB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,QAAQ,CAAC,SAAS;gBACpB,CAAC,CAAC,mBACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACpF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,6CAEzF;gBACE,CAAC,CAAC,+BAA+B,UAErC,CAAA;IAEF,OAAO,UAAG,mCAAgB,iBAE1B,IAAA,gDAA2B,EAAC,kBAAkB,CAAC,gEAG3B,YAAY,qBAGhC,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA4B,EAAC,gCAAa,CAAC,eAC3C,IAAA,+CAA2B,GAAE,wKAI7B,IAAA,iDAA4B,GAAE,+xFAwE9B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,+CAA0B,EAAC,SAAS,CAAC,iBAErC,IAAA,oDAA+B,EAAC,SAAS,CAAC,iBAE1C,IAAA,0CAA8B,EAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,iBAEpE,IAAA,yDAAiC,EAAC,SAAS,CAAC,oEAG5C,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,0FAKlC,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,ggCA2B1D,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,0HAIlC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,+BACpD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,0kCA0BC,SAAS,iCAAqB,SAAS,wkCAoBiB,qCAAmB,y4BAexC,qCAAmB,+hEAkDvF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,irBAwBlC,CAAA;AACD,CAAC,CAAA;AAlTY,QAAA,yBAAyB,6BAkTrC;AAEM,IAAM,8BAA8B,GAAG,UAC5C,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA,CAAA;IAE5C,OAAO,iDAEP,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,yxBA0B1B,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAI1C,SAAS;QACP,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,MAAG;QAC/E,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,88BAyBH,SAAS,2xBA8BrD,CAAA;AACD,CAAC,CAAA;AAjGY,QAAA,8BAA8B,kCAiG1C"}
+{"version":3,"file":"postgresql.js","sourceRoot":"","sources":["../../../src/fetchers/postgresql.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,4DAAmG;AACnG,sDAAwD;AACxD,0CAAgF;AAChF,kEAA4E;AAE5E,+DAA0D;AAC1D,iEAKmC;AACnC,wDAAiF;AACjF,iEAAyE;AACzE,0DAAkE;AAClE,uDAAqD;AAe9C,IAAM,yBAAyB,GAAG,UACvC,MAA+B,EAC/B,SAAiB,EACjB,kBAA8C;AAC9C,4EAA4E;AAC5E,YAAkC;AAClC,8EAA8E;AAC9E,aAAgC;AAChC,yEAAyE;AACzE,MAAmC;;IANnC,mCAAA,EAAA,uBAA8C;IAM9C,uBAAA,EAAA,WAAmC;IAEnC,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA;IAEvC,IAAM,YAAY,GAAG,QAAQ,CAAC,gBAAgB;QAC5C,CAAC,CAAC,mCACkB,IAAA,8BAAsB,EAAC,QAAQ,CAAC,gBAAgB,CAAC,WACrE;QACA,CAAC,CAAC,uBACM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAC7B,QAAQ,CAAC,IAAI,IAAI,IAAI,0BACrB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,8BAC9C,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC,8BACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,yBAE3C,QAAQ,CAAC,GAAG,KAAK,KAAK;YACpB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,QAAQ,CAAC,SAAS;gBACpB,CAAC,CAAC,mBACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACpF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,6CAEzF;gBACE,CAAC,CAAC,+BAA+B,UAErC,CAAA;IAEF,OAAO,UAAG,mCAAgB,iBAE1B,IAAA,gDAA2B,EAC3B,kBAAkB,EAClB,aAAa,IAAI,8BAAY,CAAC,eAAe,CAAC,YAAY,EAAE,EAAE,SAAS,WAAA,EAAE,CAAC,EAC1E,IAAA,wCAAmB,EAAC,MAAM,EAAE,SAAS,CAAC,EACtC,SAAS,EACT,MAAM,CACP,2NAKmC,YAAY,gCAC5C,8BAAY,CAAC,qBAAqB,wBAIpC,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA4B,EAAC,gCAAa,CAAC,eAC3C,IAAA,+CAA2B,GAAE,wKAI7B,IAAA,iDAA4B,GAAE,s8FA0E9B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,+CAA0B,EAAC,SAAS,CAAC,iBAErC,IAAA,oDAA+B,EAAC,SAAS,CAAC,iBAE1C,IAAA,0CAA8B,EAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,iBAEpE,IAAA,yDAAiC,EAAC,SAAS,CAAC,oEAG5C,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,0FAKlC,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,ggCA2B1D,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,0HAIlC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,+BACpD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,itCA2BC,SAAS,iCAAqB,SAAS,wkCAoBiB,qCAAmB,y4BAexC,qCAAmB,grEAoDvF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,irBAwBlC,CAAA;AACD,CAAC,CAAA;AAvUY,QAAA,yBAAyB,6BAuUrC;AAEM,IAAM,8BAA8B,GAAG,UAC5C,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA,CAAA;IAE5C,OAAO,iDAEP,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,yxBA0B1B,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAI1C,SAAS;QACP,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,MAAG;QAC/E,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,qlCA0BH,SAAS,2xBA8BrD,CAAA;AACD,CAAC,CAAA;AAlGY,QAAA,8BAA8B,kCAkG1C"}

package/dist/cjs/fetchers/raw-query.d.ts

@@ -1,3 +1,22 @@
+/**
+ * What a raw-query state route is behind: the protection of the page it
+ * serves (`PageAccess.resolvePageAccessPolicy`; null for a page every visitor
+ * may open, and for an app-wide global state), and the roles that may read the
+ * protected tables (`TableAccess.resolveTrustedReaderRoles`).
+ */
+export interface RawQueryRouteAccess {
+    pageAccess?: {
+        requiresAuth: boolean;
+        allowedRoles: string[];
+        requiresSubscription?: boolean;
+        subscriptionProductIds?: string[];
+    } | null;
+    trustedReaderRoles?: string[];
+    /** The route's path back to the project root; absent, three folders (`pages/api/page-state/`, `pages/api/global-state/`). */
+    projectRoot?: string;
+    /** The project has authentication: the session reader checks revocation (absent: it does). */
+    withRevocation?: boolean;
+}
 /**
  * Generates an API route handler that executes a parameterized raw SQL query.
  * Supports {{Current User.*}} substitution — bound to the SESSION's user.
@@ -13,7 +32,7 @@
  * @param query - Raw SQL query string with {{Current User.*}} patterns already replaced to $N placeholders
  * @param paramFields - Array of query param field names that map to $1, $2, etc. in order
  */
-export declare const generateRawQueryFetcher: (config: Record<string, unknown>, query: string, paramFields: string[]) => string;
+export declare const generateRawQueryFetcher: (config: Record<string, unknown>, query: string, paramFields: string[], access?: RawQueryRouteAccess) => string;
 /**
  * Parses a SQL query string for {{Current User.*}} template patterns.
  * Returns the parameterized query and an ordered list of field names.

package/dist/cjs/fetchers/raw-query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"raw-query.d.ts","sourceRoot":"","sources":["../../../src/fetchers/raw-query.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,SACxB,MAAM,eACA,MAAM,EAAE,KACpB,MA6IF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,UAC/B,MAAM;wBACU,MAAM;iBAAe,MAAM,EAAE;CAoCrD,CAAA"}
+{"version":3,"file":"raw-query.d.ts","sourceRoot":"","sources":["../../../src/fetchers/raw-query.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE;QACX,YAAY,EAAE,OAAO,CAAA;QACrB,YAAY,EAAE,MAAM,EAAE,CAAA;QACtB,oBAAoB,CAAC,EAAE,OAAO,CAAA;QAC9B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;KAClC,GAAG,IAAI,CAAA;IACR,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,6HAA6H;IAC7H,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8FAA8F;IAC9F,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAoCD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,SACxB,MAAM,eACA,MAAM,EAAE,WACb,mBAAmB,KAC1B,MA+NF,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,2BAA2B,UAC/B,MAAM;wBACU,MAAM;iBAAe,MAAM,EAAE;CAoCrD,CAAA"}

package/dist/cjs/fetchers/raw-query.js

@@ -13,6 +13,13 @@ exports.parseQueryTemplateVariables = exports.generateRawQueryFetcher = void 0;
 var teleport_shared_1 = require("@teleporthq/teleport-shared");
 var utils_1 = require("../utils");
 var pg_client_import_1 = require("./pg-client-import");
+/** The longest value a request may bind into the statement (a route param). */
+var MAX_REQUEST_PARAM_LENGTH = 256;
+/** The largest row count the baked statement asks for itself (`LIMIT n` at its end), or 0. */
+var statementLimit = function (query) {
+    var match = /\blimit\s+(\d+)\s*(?:offset\s+\d+\s*)?;?\s*$/i.exec(query);
+    return match ? parseInt(match[1], 10) : 0;
+};
 var FORBIDDEN_KEYWORDS = ['CREATE', 'ALTER', 'DROP', 'TRUNCATE', 'RENAME', 'GRANT', 'REVOKE'];
 /** The param a `{{Current User.<field>}}` token becomes: `currentUser` + the field, capitalised. */
 var CURRENT_USER_PARAM_PREFIX = 'currentUser';
@@ -39,21 +46,44 @@ var currentUserField = function (param) {
  * @param query - Raw SQL query string with {{Current User.*}} patterns already replaced to $N placeholders
  * @param paramFields - Array of query param field names that map to $1, $2, etc. in order
  */
-var generateRawQueryFetcher = function (config, query, paramFields) {
+var generateRawQueryFetcher = function (config, query, paramFields, access) {
     var _a, _b, _c, _d;
+    if (access === void 0) { access = {}; }
     var pgConfig = config;
     var userParams = paramFields.filter(isCurrentUserParam);
     var requestParams = paramFields.filter(function (param) { return !isCurrentUserParam(param); });
+    var pageAccess = access.pageAccess || null;
+    var rowCap = Math.max(teleport_shared_1.DataExposure.BROWSER_READ_MAX_LIMIT, statementLimit(query));
     var paramDestructure = __spreadArray([
-        requestParams.length > 0 ? "const { ".concat(requestParams.join(', '), " } = req.query") : '',
+        requestParams.length > 0
+            ? "const { ".concat(requestParams
+                .map(function (param) { return "".concat(param, ": __raw_").concat(param); })
+                .join(', '), " } = req.query\n    ").concat(requestParams
+                .map(function (param) { return "const ".concat(param, " = requestParam(__raw_").concat(param, ")"); })
+                .join('\n    '))
+            : '',
         userParams.length > 0 ? 'const __sessionUser = await sessionUser(req)' : ''
     ], userParams.map(function (param) {
         return "const ".concat(param, " = sessionUserField(__sessionUser, ").concat(JSON.stringify(currentUserField(param)), ")");
     }), true).filter(Boolean)
         .join('\n    ');
-    var sessionHelpers = userParams.length > 0
-        ? "".concat(teleport_shared_1.SessionCookieResolver.generateCommonJsSessionTokenResolverCode(), "\n// The signed-in user this request's session names, or null.\nasync function sessionUser(req) {\n  try {\n    return await __tqSessionToken(req)\n  } catch (e) {\n    return null\n  }\n}\n\n// One field of that user, as the session carries it (the token is seeded from\n// the users row), or undefined. The id is the token's subject when not copied.\nfunction sessionUserField(user, field) {\n  if (!user) return undefined\n  var value = field === 'id' && user.id == null ? user.sub : user[field]\n  return value == null || value === '' ? undefined : value\n}\n")
-        : '';
+    // Every route carries the session resolver and the table-access helpers: the
+    // page's protection, the protected tables and the credential columns are
+    // checked here as on every other read route.
+    // The route lives in pages/api/page-state/ or pages/api/global-state/: three folders below the root.
+    var projectRoot = access.projectRoot || '../../..';
+    var sessionHelpers = "".concat(teleport_shared_1.SessionCookieResolver.generateCommonJsSessionTokenResolverCode(projectRoot, {
+        withRevocation: access.withRevocation !== false,
+    }), "\n").concat(teleport_shared_1.TableAccess.generateTableAccessHelperCode({
+        trustedReaderRoles: access.trustedReaderRoles || [],
+        projectRoot: projectRoot,
+    }), "\n// The signed-in user this request's session names, or null.\nasync function sessionUser(req) {\n  try {\n    return await __tqSessionToken(req)\n  } catch (e) {\n    return null\n  }\n}\n\n// One field of that user, as the session carries it (the token is seeded from\n// the users row), or undefined. The id is the token's subject when not copied.\nfunction sessionUserField(user, field) {\n  if (!user) return undefined\n  var value = field === 'id' && user.id == null ? user.sub : user[field]\n  return value == null || value === '' ? undefined : value\n}\n\n// A value the request binds into the statement (a details page's route param):\n// one short string, never a list or an object.\nfunction requestParam(value) {\n  if (Array.isArray(value)) value = value[0]\n  if (value === undefined || value === null) return undefined\n  var text = String(value)\n  return text.length > 0 && text.length <= ").concat(MAX_REQUEST_PARAM_LENGTH, " ? text : undefined\n}\n\n// Who may run this route's statement: the visitors the page it serves admits\n// (PAGE_ACCESS, null for every visitor), and \u2014 when the statement reads a\n// protected table \u2014 only the app's own server code, a trusted role, or a\n// session the statement itself is scoped to (a {{Current User.*}} value bound\n// from that session above). null when the request may proceed.\nvar PAGE_ACCESS = ").concat(JSON.stringify(pageAccess
+        ? {
+            allowedRoles: pageAccess.allowedRoles || [],
+            requiresSubscription: pageAccess.requiresSubscription === true,
+            subscriptionProductIds: pageAccess.subscriptionProductIds || [],
+        }
+        : null), "\n").concat(pageAccess && pageAccess.requiresSubscription ? teleport_shared_1.DataExposure.generateEntitlementCheckCode() : '', "\nvar SESSION_SCOPED = ").concat(JSON.stringify(userParams.length > 0), "\nvar ROW_CAP = ").concat(rowCap, "\n// No query waits on the database longer than this (enforced by the client:\n// a server-side statement_timeout does not survive a pooler).\nvar QUERY_TIMEOUT_MS = ").concat(teleport_shared_1.DataExposure.READ_QUERY_TIMEOUT_MS, "\nasync function guardStatement(req, query) {\n  // A retired table is reached by no caller, this app's own server code included.\n  if (__taRetiredTableNamed(null, query)) return { status: 403, message: 'Forbidden' }\n  if (__taIsInternalRequest(req)) return null\n  var token = await sessionUser(req)\n  var role = token ? __taRoleOf(token) : null\n  if (PAGE_ACCESS) {\n    if (!token) return { status: 401, message: 'Unauthenticated' }\n    if (PAGE_ACCESS.allowedRoles.length > 0 && (!role || PAGE_ACCESS.allowedRoles.indexOf(role) === -1)) {\n      return { status: 403, message: 'Forbidden' }\n    }\n    // A subscriber-only page: its states too need the entitlement.\n    if (PAGE_ACCESS.requiresSubscription && !(await __dxEntitled(token, PAGE_ACCESS.subscriptionProductIds))) {\n      return { status: 403, message: 'Forbidden' }\n    }\n  }\n  if (__taProtectedTablesRead(null, query).length === 0) return null\n  if (role && __TA_TRUSTED_READER_ROLES.indexOf(role) !== -1) return null\n  // Scoped to the session's own value: without a session the statement never\n  // runs (no value to bind), and the request is answered with no rows.\n  if (SESSION_SCOPED) return null\n  return token ? { status: 403, message: 'Forbidden' } : { status: 401, message: 'Unauthenticated' }\n}\n");
     var paramValidation = paramFields.length > 0
         ? "\n    if (".concat(paramFields.map(function (f) { return "!".concat(f); }).join(' || '), ") {\n      return res.status(200).json({ success: true, data: [], timestamp: Date.now() })\n    }")
         : '';
@@ -65,9 +95,9 @@ var generateRawQueryFetcher = function (config, query, paramFields) {
                 ? "{\n      ".concat(pgConfig.sslConfig.ca ? "ca: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.ca), ",") : '', "\n      ").concat(pgConfig.sslConfig.cert ? "cert: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.cert), ",") : '', "\n      ").concat(pgConfig.sslConfig.key ? "key: ".concat((0, utils_1.replaceSecretReference)(pgConfig.sslConfig.key), ",") : '', "\n      rejectUnauthorized: false\n    }")
                 : '{ rejectUnauthorized: false }'
             : 'false';
-    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\nconst FORBIDDEN_KEYWORDS = ").concat(JSON.stringify(FORBIDDEN_KEYWORDS), "\n").concat(sessionHelpers, "\nconst getClient = () => {\n  const connStr = process.env.TELEPORT_DB_CONNECTION_STRING\n  if (connStr) {\n    const sslEnv = process.env.TELEPORT_DB_SSL\n    const sslOpt = sslEnv === 'false' ? false : sslEnv === 'true' ? { rejectUnauthorized: false } : undefined\n    return new Client(Object.assign({ connectionString: connStr }, sslOpt !== undefined ? { ssl: sslOpt } : {}))\n  }\n  return new Client({\n    host: process.env.TELEPORT_DB_HOST || ").concat(JSON.stringify((_a = pgConfig.host) !== null && _a !== void 0 ? _a : null), ",\n    port: parseInt(process.env.TELEPORT_DB_PORT || '").concat(pgConfig.port || 5432, "', 10),\n    user: process.env.TELEPORT_DB_USER || ").concat(JSON.stringify((_c = (_b = pgConfig.user) !== null && _b !== void 0 ? _b : pgConfig.username) !== null && _c !== void 0 ? _c : null), ",\n    password: process.env.TELEPORT_DB_PASSWORD || ").concat((0, utils_1.replaceSecretReference)(pgConfig.password) !== 'undefined'
+    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\nconst FORBIDDEN_KEYWORDS = ").concat(JSON.stringify(FORBIDDEN_KEYWORDS), "\n").concat(sessionHelpers, "\nconst getClient = () => {\n  const connStr = process.env.TELEPORT_DB_CONNECTION_STRING\n  if (connStr) {\n    const sslEnv = process.env.TELEPORT_DB_SSL\n    const sslOpt = sslEnv === 'false' ? false : sslEnv === 'true' ? { rejectUnauthorized: false } : undefined\n    return new Client(Object.assign({ connectionString: connStr, query_timeout: QUERY_TIMEOUT_MS }, sslOpt !== undefined ? { ssl: sslOpt } : {}))\n  }\n  return new Client({\n    query_timeout: QUERY_TIMEOUT_MS,\n    host: process.env.TELEPORT_DB_HOST || ").concat(JSON.stringify((_a = pgConfig.host) !== null && _a !== void 0 ? _a : null), ",\n    port: parseInt(process.env.TELEPORT_DB_PORT || '").concat(pgConfig.port || 5432, "', 10),\n    user: process.env.TELEPORT_DB_USER || ").concat(JSON.stringify((_c = (_b = pgConfig.user) !== null && _b !== void 0 ? _b : pgConfig.username) !== null && _c !== void 0 ? _c : null), ",\n    password: process.env.TELEPORT_DB_PASSWORD || ").concat((0, utils_1.replaceSecretReference)(pgConfig.password) !== 'undefined'
         ? (0, utils_1.replaceSecretReference)(pgConfig.password)
-        : 'null', ",\n    database: process.env.TELEPORT_DB_NAME || ").concat(JSON.stringify((_d = pgConfig.database) !== null && _d !== void 0 ? _d : null), ",\n    ssl: ").concat(sslValue, "\n  })\n}\n\nconst validateQuery = (query) => {\n  const trimmed = query.trim().toUpperCase()\n  for (const keyword of FORBIDDEN_KEYWORDS) {\n    if (trimmed.startsWith(keyword)) {\n      return false\n    }\n  }\n  return true\n}\n\nexport default async function handler(req, res) {\n  try {\n    ").concat(paramDestructure, "\n    ").concat(paramValidation, "\n\n    const query = ").concat(JSON.stringify(query), "\n\n    if (!validateQuery(query)) {\n      return res.status(400).json({\n        success: false,\n        error: 'Only SELECT queries are allowed',\n        timestamp: Date.now()\n      })\n    }\n\n    const client = getClient()\n    await client.connect()\n\n    try {\n      const result = await client.query(query, ").concat(paramArray, ")\n\n      return res.status(200).json({\n        success: true,\n        data: result.rows,\n        timestamp: Date.now()\n      })\n    } finally {\n      await client.end()\n    }\n  } catch (error) {\n    // A database error names tables, columns and values: server log only.\n    console.error('Raw query fetch error:', error)\n    return res.status(500).json({\n      success: false,\n      error: 'Failed to fetch data',\n      timestamp: Date.now()\n    })\n  }\n}\n");
+        : 'null', ",\n    database: process.env.TELEPORT_DB_NAME || ").concat(JSON.stringify((_d = pgConfig.database) !== null && _d !== void 0 ? _d : null), ",\n    ssl: ").concat(sslValue, "\n  })\n}\n\nconst validateQuery = (query) => {\n  const trimmed = query.trim().toUpperCase()\n  for (const keyword of FORBIDDEN_KEYWORDS) {\n    if (trimmed.startsWith(keyword)) {\n      return false\n    }\n  }\n  return true\n}\n\nexport default async function handler(req, res) {\n  try {\n    const query = ").concat(JSON.stringify(query), "\n    const __denied = await guardStatement(req, query)\n    if (__denied) {\n      return res.status(__denied.status).json({ success: false, error: __denied.message, timestamp: Date.now() })\n    }\n    ").concat(paramDestructure, "\n    ").concat(paramValidation, "\n\n    if (!validateQuery(query)) {\n      return res.status(400).json({\n        success: false,\n        error: 'Only SELECT queries are allowed',\n        timestamp: Date.now()\n      })\n    }\n\n    const client = getClient()\n    await client.connect()\n\n    try {\n      const result = await client.query(query, ").concat(paramArray, ")\n      const rows = Array.isArray(result && result.rows) ? result.rows : []\n\n      return res.status(200).json({\n        success: true,\n        // No credential column leaves in a row, and a browser gets at most\n        // ROW_CAP rows (the statement's own LIMIT when it asks for more).\n        data: __taWithoutCredentials(__taIsInternalRequest(req) ? rows : rows.slice(0, ROW_CAP), null),\n        timestamp: Date.now()\n      })\n    } finally {\n      await client.end()\n    }\n  } catch (error) {\n    // A database error names tables, columns and values: server log only,\n    // under the reference the client gets.\n    const id = Math.floor(Math.random() * 0xffffffff).toString(16)\n    console.error('Raw query fetch error (' + id + '):', error)\n    return res.status(500).json({\n      success: false,\n      error: 'Failed to fetch data',\n      id: id,\n      timestamp: Date.now()\n    })\n  }\n}\n");
 };
 exports.generateRawQueryFetcher = generateRawQueryFetcher;
 /**

package/dist/cjs/fetchers/raw-query.js.map

@@ -1 +1 @@
-{"version":3,"file":"raw-query.js","sourceRoot":"","sources":["../../../src/fetchers/raw-query.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+DAAmE;AACnE,kCAAiD;AACjD,uDAAqD;AAarD,IAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;AAE/F,oGAAoG;AACpG,IAAM,yBAAyB,GAAG,aAAa,CAAA;AAE/C,IAAM,kBAAkB,GAAG,UAAC,KAAa;IACvC,OAAA,KAAK,CAAC,MAAM,GAAG,yBAAyB,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,CAAC;AAAjG,CAAiG,CAAA;AAEnG,uFAAuF;AACvF,IAAM,gBAAgB,GAAG,UAAC,KAAa;IACrC,IAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACI,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,KAAa,EACb,WAAqB;;IAErB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACzD,IAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,UAAC,KAAK,IAAK,OAAA,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAA1B,CAA0B,CAAC,CAAA;IAE/E,IAAM,gBAAgB,GAAG;QACvB,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAW,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAgB,CAAC,CAAC,CAAC,EAAE;QACnF,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,EAAE;OACxE,UAAU,CAAC,GAAG,CACf,UAAC,KAAK;QACJ,OAAA,gBAAS,KAAK,gDAAsC,IAAI,CAAC,SAAS,CAChE,gBAAgB,CAAC,KAAK,CAAC,CACxB,MAAG;IAFJ,CAEI,CACP,QAEA,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,QAAQ,CAAC,CAAA;IAEjB,IAAM,cAAc,GAClB,UAAU,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,CAAC,UAAG,uCAAqB,CAAC,wCAAwC,EAAE,wjBAiB1E;QACK,CAAC,CAAC,EAAE,CAAA;IAER,IAAM,eAAe,GACnB,WAAW,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,oBACE,WAAW,CAAC,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,WAAI,CAAC,CAAE,EAAP,CAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sGAEhD;QACA,CAAC,CAAC,EAAE,CAAA;IAER,IAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAEhF,IAAM,QAAQ,GACZ,QAAQ,CAAC,GAAG,KAAK,KAAK;QACpB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS;YAC7C,CAAC,CAAC,QAAQ,CAAC,SAAS;gBAClB,CAAC,CAAC,mBACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACpF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,6CAEzF;gBACE,CAAC,CAAC,+BAA+B;YACnC,CAAC,CAAC,OAAO,CAAA;IAEb,OAAO,UAAG,mCAAgB,4CAEC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAC7D,cAAc,gdAS4B,IAAI,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,IAAI,mCAAI,IAAI,CAAC,oEAC3B,QAAQ,CAAC,IAAI,IAAI,IAAI,gEAC/B,IAAI,CAAC,SAAS,CACpD,MAAA,MAAA,QAAQ,CAAC,IAAI,mCAAI,QAAQ,CAAC,QAAQ,mCAAI,IAAI,CAC3C,kEAEC,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,WAAW;QACvD,CAAC,CAAC,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,CAAC,CAAC,MAAM,8DAEgC,IAAI,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,QAAQ,mCAAI,IAAI,CAAC,yBAC9E,QAAQ,uTAgBb,gBAAgB,mBAChB,eAAe,mCAED,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,8UAcQ,UAAU,geAoB1D,CAAA;AACD,CAAC,CAAA;AAjJY,QAAA,uBAAuB,2BAiJnC;AAED;;;GAGG;AACI,IAAM,2BAA2B,GAAG,UACzC,KAAa;IAEb,IAAM,SAAS,GAAG,8BAA8B,CAAA;IAChD,IAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,6CAA6C;IAC7C,IAAM,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,KAAK,KAAK,IAAI,EAAE;QACrB,IAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAChC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;SACxB;QACD,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;KAC3B;IAED,qDAAqD;IACrD,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC3C,IAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC5B,kEAAkE;QAClE,IAAM,aAAa,GAAG,0BAAmB,KAAK,QAAK,CAAA;QACnD,IAAM,eAAe,GAAG,yBAAkB,KAAK,OAAI,CAAA;QAEnD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;YAC9C,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,WAAI,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;SAC/E;aAAM;YACL,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,WAAI,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;SACjF;KACF;IAED,qDAAqD;IACrD,IAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CACrC,UAAC,CAAC,IAAK,OAAA,qBAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,EAAtD,CAAsD,CAC9D,CAAA;IAED,OAAO,EAAE,kBAAkB,oBAAA,EAAE,WAAW,EAAE,eAAe,EAAE,CAAA;AAC7D,CAAC,CAAA;AAtCY,QAAA,2BAA2B,+BAsCvC"}
+{"version":3,"file":"raw-query.js","sourceRoot":"","sources":["../../../src/fetchers/raw-query.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+DAA8F;AAC9F,kCAAiD;AACjD,uDAAqD;AAsBrD,+EAA+E;AAC/E,IAAM,wBAAwB,GAAG,GAAG,CAAA;AAEpC,8FAA8F;AAC9F,IAAM,cAAc,GAAG,UAAC,KAAa;IACnC,IAAM,KAAK,GAAG,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzE,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC3C,CAAC,CAAA;AAaD,IAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;AAE/F,oGAAoG;AACpG,IAAM,yBAAyB,GAAG,aAAa,CAAA;AAE/C,IAAM,kBAAkB,GAAG,UAAC,KAAa;IACvC,OAAA,KAAK,CAAC,MAAM,GAAG,yBAAyB,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,CAAC;AAAjG,CAAiG,CAAA;AAEnG,uFAAuF;AACvF,IAAM,gBAAgB,GAAG,UAAC,KAAa;IACrC,IAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACI,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,KAAa,EACb,WAAqB,EACrB,MAAgC;;IAAhC,uBAAA,EAAA,WAAgC;IAEhC,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACzD,IAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,UAAC,KAAK,IAAK,OAAA,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAA1B,CAA0B,CAAC,CAAA;IAC/E,IAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAA;IAC5C,IAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,8BAAY,CAAC,sBAAsB,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IAEnF,IAAM,gBAAgB,GAAG;QACvB,aAAa,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC,kBAAW,aAAa;iBACrB,GAAG,CAAC,UAAC,KAAK,IAAK,OAAA,UAAG,KAAK,qBAAW,KAAK,CAAE,EAA1B,CAA0B,CAAC;iBAC1C,IAAI,CAAC,IAAI,CAAC,iCAAuB,aAAa;iBAC9C,GAAG,CAAC,UAAC,KAAK,IAAK,OAAA,gBAAS,KAAK,mCAAyB,KAAK,MAAG,EAA/C,CAA+C,CAAC;iBAC/D,IAAI,CAAC,QAAQ,CAAC,CAAE;YACrB,CAAC,CAAC,EAAE;QACN,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,EAAE;OACxE,UAAU,CAAC,GAAG,CACf,UAAC,KAAK;QACJ,OAAA,gBAAS,KAAK,gDAAsC,IAAI,CAAC,SAAS,CAChE,gBAAgB,CAAC,KAAK,CAAC,CACxB,MAAG;IAFJ,CAEI,CACP,QAEA,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,QAAQ,CAAC,CAAA;IAEjB,6EAA6E;IAC7E,yEAAyE;IACzE,6CAA6C;IAC7C,qGAAqG;IACrG,IAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,UAAU,CAAA;IACpD,IAAM,cAAc,GAAG,UAAG,uCAAqB,CAAC,wCAAwC,CACtF,WAAW,EACX;QACE,cAAc,EAAE,MAAM,CAAC,cAAc,KAAK,KAAK;KAChD,CACF,eACD,6BAAW,CAAC,6BAA6B,CAAC;QAC1C,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;QACnD,WAAW,aAAA;KACZ,CAAC,w5BAwB2C,wBAAwB,0bAQjD,IAAI,CAAC,SAAS,CAC9B,UAAU;QACR,CAAC,CAAC;YACE,YAAY,EAAE,UAAU,CAAC,YAAY,IAAI,EAAE;YAC3C,oBAAoB,EAAE,UAAU,CAAC,oBAAoB,KAAK,IAAI;YAC9D,sBAAsB,EAAE,UAAU,CAAC,sBAAsB,IAAI,EAAE;SAChE;QACH,CAAC,CAAC,IAAI,CACT,eACD,UAAU,IAAI,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,8BAAY,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC,EAAE,oCAC3E,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,6BAC5C,MAAM,mLAGG,8BAAY,CAAC,qBAAqB,gxCAwB1D,CAAA;IAEC,IAAM,eAAe,GACnB,WAAW,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,oBACE,WAAW,CAAC,GAAG,CAAC,UAAC,CAAC,IAAK,OAAA,WAAI,CAAC,CAAE,EAAP,CAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,sGAEhD;QACA,CAAC,CAAC,EAAE,CAAA;IAER,IAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,IAAI,CAAA;IAEhF,IAAM,QAAQ,GACZ,QAAQ,CAAC,GAAG,KAAK,KAAK;QACpB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS;YAC7C,CAAC,CAAC,QAAQ,CAAC,SAAS;gBAClB,CAAC,CAAC,mBACF,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACpF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAC1F,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,6CAEzF;gBACE,CAAC,CAAC,+BAA+B;YACnC,CAAC,CAAC,OAAO,CAAA;IAEb,OAAO,UAAG,mCAAgB,4CAEC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAC7D,cAAc,uhBAU4B,IAAI,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,IAAI,mCAAI,IAAI,CAAC,oEAC3B,QAAQ,CAAC,IAAI,IAAI,IAAI,gEAC/B,IAAI,CAAC,SAAS,CACpD,MAAA,MAAA,QAAQ,CAAC,IAAI,mCAAI,QAAQ,CAAC,QAAQ,mCAAI,IAAI,CAC3C,kEAEC,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,WAAW;QACvD,CAAC,CAAC,IAAA,8BAAsB,EAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,CAAC,CAAC,MAAM,8DAEgC,IAAI,CAAC,SAAS,CAAC,MAAA,QAAQ,CAAC,QAAQ,mCAAI,IAAI,CAAC,yBAC9E,QAAQ,qUAgBC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,yNAKnC,gBAAgB,mBAChB,eAAe,8UAc4B,UAAU,+5BA0B1D,CAAA;AACD,CAAC,CAAA;AApOY,QAAA,uBAAuB,2BAoOnC;AAED;;;GAGG;AACI,IAAM,2BAA2B,GAAG,UACzC,KAAa;IAEb,IAAM,SAAS,GAAG,8BAA8B,CAAA;IAChD,IAAM,WAAW,GAAa,EAAE,CAAA;IAEhC,6CAA6C;IAC7C,IAAM,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChD,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,KAAK,KAAK,IAAI,EAAE;QACrB,IAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;YAChC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;SACxB;QACD,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;KAC3B;IAED,qDAAqD;IACrD,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC3C,IAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC5B,kEAAkE;QAClE,IAAM,aAAa,GAAG,0BAAmB,KAAK,QAAK,CAAA;QACnD,IAAM,eAAe,GAAG,yBAAkB,KAAK,OAAI,CAAA;QAEnD,IAAI,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE;YAC9C,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,WAAI,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;SAC/E;aAAM;YACL,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,WAAI,CAAC,GAAG,CAAC,CAAE,CAAC,CAAA;SACjF;KACF;IAED,qDAAqD;IACrD,IAAM,eAAe,GAAG,WAAW,CAAC,GAAG,CACrC,UAAC,CAAC,IAAK,OAAA,qBAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,EAAtD,CAAsD,CAC9D,CAAA;IAED,OAAO,EAAE,kBAAkB,oBAAA,EAAE,WAAW,EAAE,eAAe,EAAE,CAAA;AAC7D,CAAC,CAAA;AAtCY,QAAA,2BAA2B,+BAsCvC"}

package/dist/cjs/fetchers/redshift.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redshift.d.ts","sourceRoot":"","sources":["../../../src/fetchers/redshift.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MA6MF,CAAA"}
+{"version":3,"file":"redshift.d.ts","sourceRoot":"","sources":["../../../src/fetchers/redshift.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MA+MF,CAAA"}

package/dist/cjs/fetchers/redshift.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.generateRedshiftFetcher = void 0;
 var utils_1 = require("../utils");
+var teleport_shared_1 = require("@teleporthq/teleport-shared");
 var search_relevance_1 = require("../search-relevance");
 var generateRedshiftFetcher = function (config, tableName) {
     var _a;
@@ -14,7 +15,7 @@ var generateRedshiftFetcher = function (config, tableName) {
     var ssl = redshiftConfig.ssl;
     var sslConfig = redshiftConfig.sslConfig;
     var schema = (_a = redshiftConfig.options) === null || _a === void 0 ? void 0 : _a.schema;
-    return "import { Client } from 'pg'\n\nconst getClient = () => {\n  return new Client({\n    host: ".concat(JSON.stringify(host), ",\n    port: ").concat(port || 5439, ",\n    user: ").concat(JSON.stringify(user), ",\n    password: ").concat((0, utils_1.replaceSecretReference)(password), ",\n    database: ").concat(JSON.stringify(database), ",\n    ssl: ").concat(ssl === false
+    return "import { Client } from 'pg'\n\n// No query waits on the database longer than this (enforced by the client).\nconst getClient = () => {\n  return new Client({\n    query_timeout: ".concat(teleport_shared_1.DataExposure.READ_QUERY_TIMEOUT_MS, ",\n    host: ").concat(JSON.stringify(host), ",\n    port: ").concat(port || 5439, ",\n    user: ").concat(JSON.stringify(user), ",\n    password: ").concat((0, utils_1.replaceSecretReference)(password), ",\n    database: ").concat(JSON.stringify(database), ",\n    ssl: ").concat(ssl === false
         ? '{ rejectUnauthorized: false }'
         : sslConfig
             ? "{\n      ".concat(sslConfig.ca ? "ca: ".concat((0, utils_1.replaceSecretReference)(sslConfig.ca), ",") : '', "\n      ").concat(sslConfig.cert ? "cert: ".concat((0, utils_1.replaceSecretReference)(sslConfig.cert), ",") : '', "\n      ").concat(sslConfig.key ? "key: ".concat((0, utils_1.replaceSecretReference)(sslConfig.key), ",") : '', "\n      rejectUnauthorized: ").concat(sslConfig.rejectUnauthorized !== false, "\n    }")

package/dist/cjs/fetchers/redshift.js.map

@@ -1 +1 @@
-{"version":3,"file":"redshift.js","sourceRoot":"","sources":["../../../src/fetchers/redshift.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,wDAAuF;AAahF,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,cAAc,GAAG,MAAwB,CAAA;IAC/C,IAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAA;IAChC,IAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAA;IAChC,IAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAA;IAChC,IAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAA;IACxC,IAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAA;IACxC,IAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAA;IAC9B,IAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAA;IAC1C,IAAM,MAAM,GAAG,MAAA,cAAc,CAAC,OAAO,0CAAE,MAAM,CAAA;IAE7C,OAAO,qGAIG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BACpB,IAAI,IAAI,IAAI,0BACZ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8BAChB,IAAA,8BAAsB,EAAC,QAAQ,CAAC,8BAChC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,yBAElC,GAAG,KAAK,KAAK;QACX,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,mBACF,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAClE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACxE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,yCACjD,SAAS,CAAC,kBAAkB,KAAK,KAAK,YAC5D;YACE,CAAC,CAAC,+BAA+B,CAAC,wDAAwD;8BAKhG,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA4B,EAAC,sCAAmB,CAAC,iBAEjD,IAAA,iCAAyB,GAAE,+IAOvB,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,2oBAmB1D,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,2FAG5C,MAAM;QACJ,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAG;QAC7D,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,i7EAiEhB,SAAS,wvEAkExC,CAAA;AACD,CAAC,CAAA;AAhNY,QAAA,uBAAuB,2BAgNnC"}
+{"version":3,"file":"redshift.js","sourceRoot":"","sources":["../../../src/fetchers/redshift.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,+DAA0D;AAC1D,wDAAuF;AAahF,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,cAAc,GAAG,MAAwB,CAAA;IAC/C,IAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAA;IAChC,IAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAA;IAChC,IAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAA;IAChC,IAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAA;IACxC,IAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAA;IACxC,IAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAA;IAC9B,IAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAA;IAC1C,IAAM,MAAM,GAAG,MAAA,cAAc,CAAC,OAAO,0CAAE,MAAM,CAAA;IAE7C,OAAO,4LAKY,8BAAY,CAAC,qBAAqB,0BAC3C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BACpB,IAAI,IAAI,IAAI,0BACZ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8BAChB,IAAA,8BAAsB,EAAC,QAAQ,CAAC,8BAChC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,yBAElC,GAAG,KAAK,KAAK;QACX,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,mBACF,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,cAAO,IAAA,8BAAsB,EAAC,SAAS,CAAC,EAAE,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBAClE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAS,IAAA,8BAAsB,EAAC,SAAS,CAAC,IAAI,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,qBACxE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,eAAQ,IAAA,8BAAsB,EAAC,SAAS,CAAC,GAAG,CAAC,MAAG,CAAC,CAAC,CAAC,EAAE,yCACjD,SAAS,CAAC,kBAAkB,KAAK,KAAK,YAC5D;YACE,CAAC,CAAC,+BAA+B,CAAC,wDAAwD;8BAKhG,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA4B,EAAC,sCAAmB,CAAC,iBAEjD,IAAA,iCAAyB,GAAE,+IAOvB,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,2oBAmB1D,MAAM,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,2FAG5C,MAAM;QACJ,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAG;QAC7D,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,i7EAiEhB,SAAS,wvEAkExC,CAAA;AACD,CAAC,CAAA;AAlNY,QAAA,uBAAuB,2BAkNnC"}

package/dist/cjs/fetchers/teleport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"teleport.d.ts","sourceRoot":"","sources":["../../../src/fetchers/teleport.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAA;AA2C3B,eAAO,MAAM,sBAAsB,WACzB,OAAO,MAAM,EAAE,OAAO,CAAC,KAC9B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAMpC,CAAA;AAED,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,qBACC,sBAAsB,KACvC,MAycF,CAAA;AAED,eAAO,MAAM,4BAA4B,WAC/B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MA0FF,CAAA"}
+{"version":3,"file":"teleport.d.ts","sourceRoot":"","sources":["../../../src/fetchers/teleport.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,oBAAoB,CAAA;AAgD3B,eAAO,MAAM,sBAAsB,WACzB,OAAO,MAAM,EAAE,OAAO,CAAC,KAC9B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAMpC,CAAA;AAED,eAAO,MAAM,uBAAuB,WAC1B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,qBACC,sBAAsB,KACvC,MAwdF,CAAA;AAED,eAAO,MAAM,4BAA4B,WAC/B,OAAO,MAAM,EAAE,OAAO,CAAC,aACpB,MAAM,KAChB,MA2FF,CAAA"}

package/dist/cjs/fetchers/teleport.js

@@ -9,6 +9,7 @@ var row_order_1 = require("../row-order");
 var product_filter_fields_1 = require("../product-filter-fields");
 var localized_columns_1 = require("../localized-columns");
 var request_locale_1 = require("../request-locale");
+var teleport_shared_1 = require("@teleporthq/teleport-shared");
 var table_access_guard_1 = require("./utils/table-access-guard");
 var request_sql_guards_1 = require("./utils/request-sql-guards");
 var array_overlap_sql_1 = require("../array-overlap-sql");
@@ -60,9 +61,10 @@ var generateTeleportFetcher = function (config, tableName, transformOptions) {
                 ? "key: ".concat(resolveEnvReference(dbConfig.sslConfig.key, 'TELEPORT_DB_SSL_KEY'), ",")
                 : '', "\n      rejectUnauthorized: false\n    }")
             : "(process.env.".concat(DEFAULT_ENV_KEYS.ssl, " === 'false' ? false : process.env.").concat(DEFAULT_ENV_KEYS.ssl, " === 'true' ? { rejectUnauthorized: false } : undefined)");
-    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\n").concat((0, table_access_guard_1.generateTableAccessPreamble)(transformOptions.trustedReaderRoles || []), "\nfunction normalizePostgresConnectionString(connectionString) {\n  if (!connectionString || typeof connectionString !== 'string') return connectionString;\n  if (/^postgresql:\\/(?!\\/)/i.test(connectionString)) {\n    return connectionString.replace(/^postgresql:\\//i, 'postgresql://');\n  }\n  return connectionString;\n}\n\nfunction stripSslQueryParamsFromConnectionString(connectionString) {\n  if (!connectionString || typeof connectionString !== 'string') return connectionString;\n  try {\n    var u = new URL(connectionString.replace(/^postgresql:/i, 'postgres:'));\n    u.searchParams.delete('sslmode');\n    u.searchParams.delete('ssl');\n    u.searchParams.delete('sslrootcert');\n    u.searchParams.delete('sslcert');\n    u.searchParams.delete('sslkey');\n    return u.toString().replace(/^postgres:/i, 'postgresql:');\n  } catch (e) {\n    return connectionString;\n  }\n}\n\nconst getClient = () => {\n  var ssl = ").concat(sslCode, ";\n  var connStr = process.env.TELEPORT_DB_CONNECTION_STRING;\n  if (connStr) {\n    connStr = normalizePostgresConnectionString(connStr);\n  }\n  if (ssl === false && connStr) {\n    connStr = stripSslQueryParamsFromConnectionString(connStr);\n  }\n  if (connStr) {\n    return new Client(Object.assign(\n      { connectionString: connStr },\n      ssl !== undefined ? { ssl: ssl } : {}\n    ));\n  }\n  return new Client(Object.assign(\n    {\n      host: ").concat(hostRef, ",\n      port: parseInt(").concat(portRef, " || '5432', 10),\n      user: ").concat(userRef, ",\n      password: ").concat(passwordRef, ",\n      database: ").concat(databaseRef, ",\n    },\n    ssl !== undefined ? { ssl: ssl } : {}\n  ));\n}\n\n").concat((0, utils_1.generateSafeJSONParseCode)(), "\n\n").concat((0, utils_1.generateFilterTreeHelpersCode)(), "\n\n").concat((0, utils_1.generateSearchEscapeHelpersCode)(), "\n").concat((0, search_relevance_1.generateSearchSqlHelpersCode)(search_relevance_1.PG_SEARCH_SQL), "\n").concat((0, array_overlap_sql_1.generateArrayOverlapSqlCode)(), "\n").concat((0, transformations_1.getTransformationCode)(tableName, transformOptions), "\n").concat((0, transformations_1.getTransformWrapperCode)(tableName, transformOptions), "\n").concat((0, request_sql_guards_1.generateRequestSqlGuardsCode)(), "\nconst processFilters = (filters, conditions, queryParams, paramIndex) => {\n  if (!filters) return paramIndex\n  \n  const filterTree = normalizeFilterTree(safeJSONParse(filters))\n  if (!filterTree) return paramIndex\n  \n  const buildCondition = (condition) => {\n    const field = condition.source\n    const normalizedCondition = normalizeInOperand(condition.operand, condition.destination)\n    if (normalizedCondition === null) return null\n    const value = normalizedCondition.value\n    const operand = normalizedCondition.operand\n    \n    // The products table's virtual fields (effective price, rating bucket,\n    // on-sale flag, variant axes) are whole clauses, not columns - so they are\n    // answered before any branch below can interpolate the field name raw.\n    const productClause = productFilterClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (productClause !== null) return productClause\n\n    // A translatable column is compared against the value in every language,\n    // so a localized slug resolves under any locale - see localized-columns.ts.\n    const localizedClause = localizedEqualityClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (localizedClause !== null) return localizedClause\n    assertRequestColumn(field, 'filter field')\n    \n    if (Array.isArray(value)) {\n      if (value.length === 0) return null\n      if (operand === 'array_overlap') {\n        // The row's list (see array-overlap-sql.ts) shares any value with the set.\n        const clause = arrayOverlapSql((localizedColumnList(field) || [field]), '$' + paramIndex)\n        queryParams.push(value.map((entry) => String(entry)))\n        paramIndex++\n        return clause\n      }\n      const placeholders = value.map(() => `$${paramIndex++}`)\n      queryParams.push(...value)\n      return operand === '!='\n        ? `${field} NOT IN (${placeholders.join(', ')})`\n        : `${field} IN (${placeholders.join(', ')})`\n    }\n    \n    if (operand === 'array_overlap') {\n      if (value === '' || value === null || value === undefined) return null\n      // A single comma-joined string (the multi-select Category Filter's\n      // ?categoryFilter=a,b,c) expands to multiple ids; one id stays one.\n      const overlapValues = String(value).split(',').map((entry) => entry.trim()).filter(Boolean)\n      if (overlapValues.length === 0) return null\n      const clause = arrayOverlapSql((localizedColumnList(field) || [field]), '$' + paramIndex)\n      queryParams.push(overlapValues)\n      paramIndex++\n      return clause\n    }\n    \n    if (value === null) {\n      if (operand === '=') return `${field} IS NULL`\n      if (operand === '!=') return `${field} IS NOT NULL`\n      return null\n    }\n    \n    const validOps = ['=', '!=', '>', '<', '>=', '<=']\n    const sqlOperator = validOps.includes(operand) ? operand : '='\n    const clause = `${field} ${sqlOperator} $${paramIndex}`\n    queryParams.push(value)\n    paramIndex++\n    return clause\n  }\n  \n  const clause = buildFilterTreeClause(filterTree, buildCondition)\n  if (clause) conditions.push(clause)\n  \n  return paramIndex\n}\n\n").concat((0, utils_1.generateDateFormatterCode)(), "\n\n").concat((0, product_price_sort_1.generateSortFieldSqlHelper)(tableName), "\n\n").concat((0, product_price_sort_1.generateSortFallbackFieldHelper)(tableName), "\n\n").concat((0, row_order_1.generateRowOrderTiebreakHelper)((0, row_order_1.rowIdentityColumn)(config, tableName)), "\n\n").concat((0, product_filter_fields_1.generateProductFilterClauseHelper)(tableName), "\n\n").concat((0, localized_columns_1.generateLocalizedColumnsHelper)(localizedColumns), "\n\n// Matches DDL / dangerous statements the raw-query branch should refuse.\n// Keep this list conservative \u2014 anything destructive or schema-changing is\n// out of scope for a client-triggered fetch. SELECT and CTEs (WITH ...) are\n// the only shapes consumers legitimately need.\nconst BLOCKED_RAW_QUERY_PATTERNS = [\n  /\\bcreate\\s+(?:temporary\\s+|temp\\s+|unlogged\\s+|global\\s+|local\\s+)?table\\b/i,\n  /\\bcreate\\s+(?:unique\\s+)?index\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?(?:materialized\\s+)?view\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?trigger\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?(?:aggregate\\s+)?function\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?procedure\\b/i,\n  /\\bcreate\\s+(?:database|schema|sequence|extension|type|role|user)\\b/i,\n  /\\bdrop\\s+(?:table|view|index|schema|database|sequence|trigger|function|procedure|role|user|extension|type|materialized)\\b/i,\n  /\\balter\\s+(?:table|view|index|schema|database|sequence|role|user|system)\\b/i,\n  /\\btruncate\\b/i,\n  /\\bgrant\\b/i,\n  /\\brevoke\\b/i,\n  /\\binsert\\b/i,\n  /\\bupdate\\b/i,\n  /\\bdelete\\b/i,\n  /\\bcopy\\b/i,\n  /\\bvacuum\\b/i,\n  /\\breindex\\b/i,\n  /\\bcluster\\b/i,\n]\n\nfunction assertRawQuerySafe(rawQuery) {\n  if (typeof rawQuery !== 'string' || rawQuery.length === 0) {\n    throw new Error('rawQuery must be a non-empty string')\n  }\n  // Reject multi-statement payloads \u2014 only single SELECT / WITH statements.\n  // A trailing semicolon is tolerated but any content after it fails.\n  var trimmed = rawQuery.trim().replace(/;\\s*$/, '')\n  if (trimmed.indexOf(';') !== -1) {\n    throw new Error('rawQuery must contain exactly one statement')\n  }\n  for (var i = 0; i < BLOCKED_RAW_QUERY_PATTERNS.length; i++) {\n    if (BLOCKED_RAW_QUERY_PATTERNS[i].test(trimmed)) {\n      throw new Error('rawQuery contains a blocked statement')\n    }\n  }\n}\n\nexport default async function handler(req, res) {\n").concat((0, table_access_guard_1.generateReadGuardCall)(tableName, 'req.query && req.query.rawQuery'), "\n  const client = getClient()\n\n  try {\n    await client.connect()\n    ").concat(schema ? "await client.query('SET search_path TO ".concat(schema, "')") : '', "\n\n    // If the caller supplied a rawQuery, run it verbatim (after a safety\n    // guard). The schema-driven branch below builds `SELECT * FROM ").concat(tableName, "`\n    // with optional filters \u2014 it's the default read path and ignores\n    // rawQuery. Page-load workflows and other consumers that need a JOIN\n    // or a user-scoped filter pass their fully-rendered SQL here via\n    // `fetchData({ rawQuery })` and expect it to execute verbatim.\n    if (req.query && typeof req.query.rawQuery === 'string' && req.query.rawQuery.length > 0) {\n      assertRawQuerySafe(req.query.rawQuery)\n      // A page's own statement, read for a visitor, runs over the rows a\n      // visitor is served of every narrowed table it names.\n      const rawSql = __rowAccess.narrowRaw ? __brpNarrowRawQuery(req.query.rawQuery) : req.query.rawQuery\n      const rawResult = await client.query(rawSql)\n      const rawRows = Array.isArray(rawResult?.rows) ? rawResult.rows : []\n      const rawPlain = rawRows.map((row) =>\n        row && typeof row.toJSON === 'function' ? row.toJSON() : row\n      )\n      const rawSafe = JSON.parse(JSON.stringify(rawPlain, dateReplacer))\n      return res.status(200).json({\n        success: true,\n        // Every row here ends up in a browser (a page's props or a client\n        // refetch), so no credential column survives, whatever joined it.\n        data: __taWithoutCredentials(\n          __rowAccess.narrowRaw ? __brpStripHiddenOfRaw(req.query.rawQuery, rawSafe) : rawSafe,\n          null\n        ),\n        timestamp: Date.now()\n      })\n    }\n\n    const { query, queryColumns, limit, page, perPage, sortBy, sortOrder, filters, sorts, offset } = req.query\n    // A visitor never filters, sorts or searches by a column it is not served.\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    // The language the page is in - what a translatable sort orders by.\n    const requestLocale = typeof req.query.").concat(request_locale_1.REQUEST_LOCALE_PARAM, " === 'string' ? req.query.").concat(request_locale_1.REQUEST_LOCALE_PARAM, " : null\n    \n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    let searchRank = ''\n    let searchFrom = ''\n    \n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : (parsed ? [parsed] : [])\n      } else {\n        try {\n          const schemaQuery = `\n            SELECT column_name \n            FROM information_schema.columns \n            WHERE table_name = $1\n            ").concat(schema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = ").concat(schema
+    return "".concat(pg_client_import_1.PG_CLIENT_IMPORT, "\n\n").concat((0, table_access_guard_1.generateTableAccessPreamble)(transformOptions.trustedReaderRoles || [], transformOptions.routeExposure ||
+        teleport_shared_1.DataExposure.readExposureFor(transformOptions.dataExposure, { tableName: tableName }), (0, table_access_guard_1.sqlRouteFieldPolicy)(config, tableName), tableName, transformOptions), "\nfunction normalizePostgresConnectionString(connectionString) {\n  if (!connectionString || typeof connectionString !== 'string') return connectionString;\n  if (/^postgresql:\\/(?!\\/)/i.test(connectionString)) {\n    return connectionString.replace(/^postgresql:\\//i, 'postgresql://');\n  }\n  return connectionString;\n}\n\nfunction stripSslQueryParamsFromConnectionString(connectionString) {\n  if (!connectionString || typeof connectionString !== 'string') return connectionString;\n  try {\n    var u = new URL(connectionString.replace(/^postgresql:/i, 'postgres:'));\n    u.searchParams.delete('sslmode');\n    u.searchParams.delete('ssl');\n    u.searchParams.delete('sslrootcert');\n    u.searchParams.delete('sslcert');\n    u.searchParams.delete('sslkey');\n    return u.toString().replace(/^postgres:/i, 'postgresql:');\n  } catch (e) {\n    return connectionString;\n  }\n}\n\nconst getClient = () => {\n  var ssl = ").concat(sslCode, ";\n  var connStr = process.env.TELEPORT_DB_CONNECTION_STRING;\n  if (connStr) {\n    connStr = normalizePostgresConnectionString(connStr);\n  }\n  if (ssl === false && connStr) {\n    connStr = stripSslQueryParamsFromConnectionString(connStr);\n  }\n  // No query waits on the database longer than this (enforced by the client:\n  // a server-side statement_timeout does not survive a pooler).\n  if (connStr) {\n    return new Client(Object.assign(\n      { connectionString: connStr, query_timeout: ").concat(teleport_shared_1.DataExposure.READ_QUERY_TIMEOUT_MS, " },\n      ssl !== undefined ? { ssl: ssl } : {}\n    ));\n  }\n  return new Client(Object.assign(\n    {\n      host: ").concat(hostRef, ",\n      port: parseInt(").concat(portRef, " || '5432', 10),\n      user: ").concat(userRef, ",\n      password: ").concat(passwordRef, ",\n      database: ").concat(databaseRef, ",\n      query_timeout: ").concat(teleport_shared_1.DataExposure.READ_QUERY_TIMEOUT_MS, ",\n    },\n    ssl !== undefined ? { ssl: ssl } : {}\n  ));\n}\n\n").concat((0, utils_1.generateSafeJSONParseCode)(), "\n\n").concat((0, utils_1.generateFilterTreeHelpersCode)(), "\n\n").concat((0, utils_1.generateSearchEscapeHelpersCode)(), "\n").concat((0, search_relevance_1.generateSearchSqlHelpersCode)(search_relevance_1.PG_SEARCH_SQL), "\n").concat((0, array_overlap_sql_1.generateArrayOverlapSqlCode)(), "\n").concat((0, transformations_1.getTransformationCode)(tableName, transformOptions), "\n").concat((0, transformations_1.getTransformWrapperCode)(tableName, transformOptions), "\n").concat((0, request_sql_guards_1.generateRequestSqlGuardsCode)(), "\nconst processFilters = (filters, conditions, queryParams, paramIndex) => {\n  if (!filters) return paramIndex\n  \n  const filterTree = normalizeFilterTree(safeJSONParse(filters))\n  if (!filterTree) return paramIndex\n  \n  const buildCondition = (condition) => {\n    const field = condition.source\n    const normalizedCondition = normalizeInOperand(condition.operand, condition.destination)\n    if (normalizedCondition === null) return null\n    const value = normalizedCondition.value\n    const operand = normalizedCondition.operand\n    \n    // The products table's virtual fields (effective price, rating bucket,\n    // on-sale flag, variant axes) are whole clauses, not columns - so they are\n    // answered before any branch below can interpolate the field name raw.\n    const productClause = productFilterClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (productClause !== null) return productClause\n\n    // A translatable column is compared against the value in every language,\n    // so a localized slug resolves under any locale - see localized-columns.ts.\n    const localizedClause = localizedEqualityClause(field, operand, value, (param) => {\n      queryParams.push(param)\n      return '$' + paramIndex++\n    })\n    if (localizedClause !== null) return localizedClause\n    assertRequestColumn(field, 'filter field')\n    \n    if (Array.isArray(value)) {\n      if (value.length === 0) return null\n      if (operand === 'array_overlap') {\n        // The row's list (see array-overlap-sql.ts) shares any value with the set.\n        const clause = arrayOverlapSql((localizedColumnList(field) || [field]), '$' + paramIndex)\n        queryParams.push(value.map((entry) => String(entry)))\n        paramIndex++\n        return clause\n      }\n      const placeholders = value.map(() => `$${paramIndex++}`)\n      queryParams.push(...value)\n      return operand === '!='\n        ? `${field} NOT IN (${placeholders.join(', ')})`\n        : `${field} IN (${placeholders.join(', ')})`\n    }\n    \n    if (operand === 'array_overlap') {\n      if (value === '' || value === null || value === undefined) return null\n      // A single comma-joined string (the multi-select Category Filter's\n      // ?categoryFilter=a,b,c) expands to multiple ids; one id stays one.\n      const overlapValues = String(value).split(',').map((entry) => entry.trim()).filter(Boolean)\n      if (overlapValues.length === 0) return null\n      const clause = arrayOverlapSql((localizedColumnList(field) || [field]), '$' + paramIndex)\n      queryParams.push(overlapValues)\n      paramIndex++\n      return clause\n    }\n    \n    if (value === null) {\n      if (operand === '=') return `${field} IS NULL`\n      if (operand === '!=') return `${field} IS NOT NULL`\n      return null\n    }\n    \n    // 'like' reads a JSON-list cell for one member (a post's former slugs); the\n    // value is a bound parameter, so a pattern never reaches the SQL text.\n    const validOps = ['=', '!=', '>', '<', '>=', '<=', 'like']\n    const sqlOperator = validOps.includes(operand) ? operand : '='\n    const clause = `${field} ${sqlOperator} $${paramIndex}`\n    queryParams.push(value)\n    paramIndex++\n    return clause\n  }\n  \n  const clause = buildFilterTreeClause(filterTree, buildCondition)\n  if (clause) conditions.push(clause)\n  \n  return paramIndex\n}\n\n").concat((0, utils_1.generateDateFormatterCode)(), "\n\n").concat((0, product_price_sort_1.generateSortFieldSqlHelper)(tableName), "\n\n").concat((0, product_price_sort_1.generateSortFallbackFieldHelper)(tableName), "\n\n").concat((0, row_order_1.generateRowOrderTiebreakHelper)((0, row_order_1.rowIdentityColumn)(config, tableName)), "\n\n").concat((0, product_filter_fields_1.generateProductFilterClauseHelper)(tableName), "\n\n").concat((0, localized_columns_1.generateLocalizedColumnsHelper)(localizedColumns), "\n\n// Matches DDL / dangerous statements the raw-query branch should refuse.\n// Keep this list conservative \u2014 anything destructive or schema-changing is\n// out of scope for a client-triggered fetch. SELECT and CTEs (WITH ...) are\n// the only shapes consumers legitimately need.\nconst BLOCKED_RAW_QUERY_PATTERNS = [\n  /\\bcreate\\s+(?:temporary\\s+|temp\\s+|unlogged\\s+|global\\s+|local\\s+)?table\\b/i,\n  /\\bcreate\\s+(?:unique\\s+)?index\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?(?:materialized\\s+)?view\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?trigger\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?(?:aggregate\\s+)?function\\b/i,\n  /\\bcreate\\s+(?:or\\s+replace\\s+)?procedure\\b/i,\n  /\\bcreate\\s+(?:database|schema|sequence|extension|type|role|user)\\b/i,\n  /\\bdrop\\s+(?:table|view|index|schema|database|sequence|trigger|function|procedure|role|user|extension|type|materialized)\\b/i,\n  /\\balter\\s+(?:table|view|index|schema|database|sequence|role|user|system)\\b/i,\n  /\\btruncate\\b/i,\n  /\\bgrant\\b/i,\n  /\\brevoke\\b/i,\n  /\\binsert\\b/i,\n  /\\bupdate\\b/i,\n  /\\bdelete\\b/i,\n  /\\bcopy\\b/i,\n  /\\bvacuum\\b/i,\n  /\\breindex\\b/i,\n  /\\bcluster\\b/i,\n]\n\nfunction assertRawQuerySafe(rawQuery) {\n  if (typeof rawQuery !== 'string' || rawQuery.length === 0) {\n    throw new Error('rawQuery must be a non-empty string')\n  }\n  // Reject multi-statement payloads \u2014 only single SELECT / WITH statements.\n  // A trailing semicolon is tolerated but any content after it fails.\n  var trimmed = rawQuery.trim().replace(/;\\s*$/, '')\n  if (trimmed.indexOf(';') !== -1) {\n    throw new Error('rawQuery must contain exactly one statement')\n  }\n  for (var i = 0; i < BLOCKED_RAW_QUERY_PATTERNS.length; i++) {\n    if (BLOCKED_RAW_QUERY_PATTERNS[i].test(trimmed)) {\n      throw new Error('rawQuery contains a blocked statement')\n    }\n  }\n}\n\nexport default async function handler(req, res) {\n").concat((0, table_access_guard_1.generateReadGuardCall)(tableName, 'req.query && req.query.rawQuery'), "\n  const client = getClient()\n\n  try {\n    await client.connect()\n    ").concat(schema ? "await client.query('SET search_path TO ".concat(schema, "')") : '', "\n\n    // If the caller supplied a rawQuery, run it verbatim (after a safety\n    // guard). The schema-driven branch below builds `SELECT * FROM ").concat(tableName, "`\n    // with optional filters \u2014 it's the default read path and ignores\n    // rawQuery. Page-load workflows and other consumers that need a JOIN\n    // or a user-scoped filter pass their fully-rendered SQL here via\n    // `fetchData({ rawQuery })` and expect it to execute verbatim.\n    if (req.query && typeof req.query.rawQuery === 'string' && req.query.rawQuery.length > 0) {\n      assertRawQuerySafe(req.query.rawQuery)\n      // A page's own statement, read for a visitor, runs over the rows a\n      // visitor is served of every narrowed table it names.\n      const rawSql = __rowAccess.narrowRaw ? __brpNarrowRawQuery(req.query.rawQuery) : req.query.rawQuery\n      const rawResult = await client.query(rawSql)\n      const rawRows = Array.isArray(rawResult?.rows) ? rawResult.rows : []\n      const rawPlain = rawRows.map((row) =>\n        row && typeof row.toJSON === 'function' ? row.toJSON() : row\n      )\n      const rawSafe = JSON.parse(JSON.stringify(rawPlain, dateReplacer))\n      return res.status(200).json({\n        success: true,\n        // Every row here ends up in a browser (a page's props or a client\n        // refetch), so no credential column survives, whatever joined it.\n        data: __taWithoutCredentials(\n          __rowAccess.narrowRaw ? __brpStripHiddenOfRaw(req.query.rawQuery, rawSafe) : rawSafe,\n          null\n        ),\n        timestamp: Date.now()\n      })\n    }\n\n    const { query, queryColumns, limit, page, perPage, sortBy, sortOrder, filters, sorts, offset } = req.query\n    // A visitor never filters, sorts or searches by a column it is not served.\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    // The language the page is in - what a translatable sort orders by.\n    const requestLocale = typeof req.query.").concat(request_locale_1.REQUEST_LOCALE_PARAM, " === 'string' ? req.query.").concat(request_locale_1.REQUEST_LOCALE_PARAM, " : null\n    \n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    let searchRank = ''\n    let searchFrom = ''\n    \n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : (parsed ? [parsed] : [])\n      } else {\n        try {\n          const schemaQuery = `\n            SELECT column_name \n            FROM information_schema.columns \n            WHERE table_name = $1\n            ").concat(schema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = ").concat(schema
         ? "[".concat(JSON.stringify(tableName), ", ").concat(JSON.stringify(schema), "]")
-        : "[".concat(JSON.stringify(tableName), "]"), "\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          columns = schemaResult.rows.map(row => row.column_name)\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      const search = buildSearchSql(query, columns, paramIndex)\n      if (search) {\n        conditions.push(search.where)\n        queryParams.push(...search.params)\n        paramIndex = search.nextIndex\n        searchRank = search.rank\n        searchFrom = search.from\n      }\n    }\n    \n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n    \n    // A search's worked-out texts stay out of the rows: only the table's own columns.\n    let sql = `SELECT ${searchFrom ? '").concat(tableName, ".*' : '*'} FROM ").concat(tableName, "${searchFrom}`\n    \n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`\n    }\n    \n    // Handle sorts - new array format. Two ORDER BY clauses are built: the one\n    // actually used (a translatable column in the request's language, the\n    // products table's price rewrites, rows without a value last), and a\n    // plain-column twin kept only as the fallback below.\n    // A search orders its matches by where the words are first; the sort\n    // orders the rows within each of those groups.\n    let orderBySql = ''\n    let plainOrderBySql = ''\n    const searchOrder = searchRank ? searchRank + ', ' : ''\n    if (sorts) {\n      const parsedSorts = safeJSONParse(sorts)\n      if (Array.isArray(parsedSorts) && parsedSorts.length > 0) {\n        const valid = parsedSorts.filter((sort) => sort && sort.field)\n        valid.forEach((sort) => assertRequestColumn(sort.field, 'sort field'))\n        const orderOf = (sort) => (sort.order || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n        const orderClauses = valid.map((sort) => `${localizedSortFieldSql(sort.field, requestLocale) || sortFieldSql(sort.field)} ${orderOf(sort)}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "`)\n        const plainClauses = valid.map((sort) => `${sortFallbackField(sort.field)} ${orderOf(sort)}`)\n\n        if (orderClauses.length > 0) {\n          // The row's own key last, so equal rows can't repeat across pages\n          // or vanish between them.\n          const tiebreak = rowOrderTiebreak(valid.map((sort) => sort.field), orderOf(valid[valid.length - 1]))\n          orderBySql = ` ORDER BY ${searchOrder}${orderClauses.join(', ')}${tiebreak}`\n          plainOrderBySql = ` ORDER BY ${searchOrder}${plainClauses.join(', ')}${tiebreak}`\n        }\n      }\n    } else if (sortBy) {\n      assertRequestColumn(sortBy, 'sort field')\n      const sortByDirection = (sortOrder || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n      const tiebreak = rowOrderTiebreak([sortBy], sortByDirection)\n      orderBySql = ` ORDER BY ${searchOrder}${localizedSortFieldSql(sortBy, requestLocale) || sortBy} ${sortByDirection}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "${tiebreak}`\n      plainOrderBySql = ` ORDER BY ${searchOrder}${sortBy} ${sortByDirection}${tiebreak}`\n    }\n    if (!orderBySql && searchRank) {\n      orderBySql = plainOrderBySql = ' ORDER BY ' + searchRank + rowOrderTiebreak([], 'ASC')\n    }\n    const usedRewrittenSort = orderBySql !== plainOrderBySql\n\n    const limitValue = requestRowCount(limit || perPage)\n    const offsetValue = offset !== undefined ? parseInt(offset) : (page && perPage ? (parseInt(page) - 1) * parseInt(perPage) : undefined)\n\n    let sqlTail = ''\n    if (limitValue !== undefined) {\n      sqlTail += ` LIMIT ${limitValue}`\n    }\n    \n    if (offsetValue !== undefined) {\n      sqlTail += ` OFFSET ${offsetValue}`\n    }\n\n    const baseSql = sql\n    sql = baseSql + orderBySql + sqlTail\n\n    // The discount-aware price ordering is an inline sub-select over a JSON\n    // column. It is written to be unraisable, but it runs inside ORDER BY for\n    // the whole table - so if a database ever rejects it, fall back to ordering\n    // by the stored list price rather than serving an empty products page. The\n    // translatable-column ordering takes the same exit: a per-language column\n    // the schema had at generation time may have been dropped since. So does\n    // the empty-values-last ordering.\n    let result\n    try {\n      result = await client.query(sql, queryParams)\n    } catch (sortError) {\n      if (!usedRewrittenSort) throw sortError\n      console.warn(\n        'Rewritten sort failed; falling back to the plain column:',\n        sortError && sortError.message\n      )\n      result = await client.query(baseSql + plainOrderBySql + sqlTail, queryParams)\n    }\n    const rows = Array.isArray(result?.rows) ? result.rows : []\n    const plainRows = rows.map((row) =>\n      row && typeof row.toJSON === 'function' ? row.toJSON() : row\n    )\n    const safeData = JSON.parse(JSON.stringify(plainRows, dateReplacer))\n    ").concat((0, transformations_1.getTransformExpression)(tableName)
+        : "[".concat(JSON.stringify(tableName), "]"), "\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          // A credential column is never searched: a search is an oracle for it.\n          columns = schemaResult.rows.map(row => row.column_name).filter((column) => !__taIsCredentialColumn(column))\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      const search = buildSearchSql(query, columns, paramIndex)\n      if (search) {\n        conditions.push(search.where)\n        queryParams.push(...search.params)\n        paramIndex = search.nextIndex\n        searchRank = search.rank\n        searchFrom = search.from\n      }\n    }\n    \n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n    \n    // A search's worked-out texts stay out of the rows: only the table's own columns.\n    let sql = `SELECT ${searchFrom ? '").concat(tableName, ".*' : '*'} FROM ").concat(tableName, "${searchFrom}`\n    \n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`\n    }\n    \n    // Handle sorts - new array format. Two ORDER BY clauses are built: the one\n    // actually used (a translatable column in the request's language, the\n    // products table's price rewrites, rows without a value last), and a\n    // plain-column twin kept only as the fallback below.\n    // A search orders its matches by where the words are first; the sort\n    // orders the rows within each of those groups.\n    let orderBySql = ''\n    let plainOrderBySql = ''\n    const searchOrder = searchRank ? searchRank + ', ' : ''\n    if (sorts) {\n      const parsedSorts = safeJSONParse(sorts)\n      if (Array.isArray(parsedSorts) && parsedSorts.length > 0) {\n        const valid = parsedSorts.filter((sort) => sort && sort.field)\n        valid.forEach((sort) => assertRequestColumn(sort.field, 'sort field'))\n        const orderOf = (sort) => (sort.order || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n        const orderClauses = valid.map((sort) => `${localizedSortFieldSql(sort.field, requestLocale) || sortFieldSql(sort.field)} ${orderOf(sort)}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "`)\n        const plainClauses = valid.map((sort) => `${sortFallbackField(sort.field)} ${orderOf(sort)}`)\n\n        if (orderClauses.length > 0) {\n          // The row's own key last, so equal rows can't repeat across pages\n          // or vanish between them.\n          const tiebreak = rowOrderTiebreak(valid.map((sort) => sort.field), orderOf(valid[valid.length - 1]))\n          orderBySql = ` ORDER BY ${searchOrder}${orderClauses.join(', ')}${tiebreak}`\n          plainOrderBySql = ` ORDER BY ${searchOrder}${plainClauses.join(', ')}${tiebreak}`\n        }\n      }\n    } else if (sortBy) {\n      assertRequestColumn(sortBy, 'sort field')\n      const sortByDirection = (sortOrder || '').toUpperCase().startsWith('DESC') ? 'DESC' : 'ASC'\n      const tiebreak = rowOrderTiebreak([sortBy], sortByDirection)\n      orderBySql = ` ORDER BY ${searchOrder}${localizedSortFieldSql(sortBy, requestLocale) || sortBy} ${sortByDirection}").concat(list_sort_order_1.SORT_NULLS_LAST_SQL, "${tiebreak}`\n      plainOrderBySql = ` ORDER BY ${searchOrder}${sortBy} ${sortByDirection}${tiebreak}`\n    }\n    if (!orderBySql && searchRank) {\n      orderBySql = plainOrderBySql = ' ORDER BY ' + searchRank + rowOrderTiebreak([], 'ASC')\n    }\n    const usedRewrittenSort = orderBySql !== plainOrderBySql\n\n    // Whole numbers only, and a browser's read capped - see __taReadWindow.\n    const __window = __taReadWindow(req)\n    const limitValue = __window.limit || __window.perPage\n    const offsetValue = __window.offset !== undefined ? __window.offset : (__window.page && __window.perPage ? (__window.page - 1) * __window.perPage : undefined)\n\n    let sqlTail = ''\n    if (limitValue !== undefined) {\n      sqlTail += ` LIMIT ${limitValue}`\n    }\n    \n    if (offsetValue !== undefined) {\n      sqlTail += ` OFFSET ${offsetValue}`\n    }\n\n    const baseSql = sql\n    sql = baseSql + orderBySql + sqlTail\n\n    // The discount-aware price ordering is an inline sub-select over a JSON\n    // column. It is written to be unraisable, but it runs inside ORDER BY for\n    // the whole table - so if a database ever rejects it, fall back to ordering\n    // by the stored list price rather than serving an empty products page. The\n    // translatable-column ordering takes the same exit: a per-language column\n    // the schema had at generation time may have been dropped since. So does\n    // the empty-values-last ordering.\n    let result\n    try {\n      result = await client.query(sql, queryParams)\n    } catch (sortError) {\n      if (!usedRewrittenSort) throw sortError\n      console.warn(\n        'Rewritten sort failed; falling back to the plain column:',\n        sortError && sortError.message\n      )\n      result = await client.query(baseSql + plainOrderBySql + sqlTail, queryParams)\n    }\n    const rows = Array.isArray(result?.rows) ? result.rows : []\n    const plainRows = rows.map((row) =>\n      row && typeof row.toJSON === 'function' ? row.toJSON() : row\n    )\n    const safeData = JSON.parse(JSON.stringify(plainRows, dateReplacer))\n    ").concat((0, transformations_1.getTransformExpression)(tableName)
         ? "const transformedData = ".concat((0, transformations_1.getTransformExpression)(tableName))
         : '', "\n\n    // Stamp each row with a globally-correct 1-based `__rowNumber` (the page\n    // offset is applied server-side above), so list index columns keep counting\n    // across pages instead of restarting at 1. Renderer-internal field \u2014 it is\n    // filtered from ordinary field bindings and only read by the index column.\n    const __finalData = ").concat((0, transformations_1.getTransformExpression)(tableName) ? 'transformedData' : 'safeData', "\n    const __rowNumberStart = (typeof offsetValue === 'number' && !isNaN(offsetValue)) ? offsetValue : 0\n    const __numberedData = Array.isArray(__finalData)\n      ? __finalData.map((__row, __i) =>\n          __row && typeof __row === 'object' && !Array.isArray(__row)\n            ? Object.assign({}, __row, { __rowNumber: __rowNumberStart + __i + 1 })\n            : __row)\n      : __finalData\n\n    return res.status(200).json({\n      success: true,\n      data: __taWithoutCredentials(\n        __rowPolicy ? __brpStripHidden(__rowPolicy, __numberedData) : __numberedData,\n        ").concat(JSON.stringify(tableName), "\n      ),\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('Teleport DB fetch error:', error)\n    // A database error names tables, columns and values: it stays in the server\n    // log. Only an error this route raised for the caller (it carries a status)\n    // is repeated to it.\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to fetch data',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing database client:', error)\n      }\n    }\n  }\n}\n");
 };
@@ -73,7 +75,7 @@ var generateTeleportCountFetcher = function (config, tableName) {
     var hasSchema = !!((_a = dbConfig.options) === null || _a === void 0 ? void 0 : _a.schema);
     return "\nasync function getCount(req, res) {\n".concat((0, table_access_guard_1.generateReadGuardCall)(tableName, null), "\n  const client = getClient()\n\n  try {\n    await client.connect()\n    const { query, queryColumns, filters } = req.query\n    if (__rowPolicy) __brpAssertVisibleFields(__rowPolicy, req.query)\n    const conditions = []\n    const queryParams = []\n    let paramIndex = 1\n    let searchFrom = ''\n\n    if (query) {\n      let columns = []\n      \n      if (queryColumns) {\n        const parsed = safeJSONParse(queryColumns)\n        columns = Array.isArray(parsed) ? parsed : [parsed]\n      } else {\n        try {\n          const schemaQuery = `\n            SELECT column_name \n            FROM information_schema.columns \n            WHERE table_name = $1\n            ").concat(hasSchema ? "AND table_schema = $2" : '', "\n            ORDER BY ordinal_position\n          `\n          const schemaParams = ").concat(hasSchema
         ? "[".concat(JSON.stringify(tableName), ", ").concat(JSON.stringify(dbConfig.options.schema), "]")
-        : "[".concat(JSON.stringify(tableName), "]"), "\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          columns = schemaResult.rows.map(row => row.column_name)\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      const search = buildSearchSql(query, columns, paramIndex)\n      if (search) {\n        conditions.push(search.where)\n        queryParams.push(...search.params)\n        paramIndex = search.nextIndex\n        searchFrom = search.from\n      }\n    }\n\n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n\n    let countSql = `SELECT COUNT(*) FROM ").concat(tableName, "${searchFrom}`\n    if (conditions.length > 0) {\n      countSql += ` WHERE ${conditions.join(' AND ')}`\n    }\n\n    const result = await client.query(countSql, queryParams)\n    const count = parseInt(result.rows[0].count, 10)\n\n    return res.status(200).json({\n      success: true,\n      count: count,\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('Error getting count:', error)\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to get count',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing database client:', error)\n      }\n    }\n  }\n}\n");
+        : "[".concat(JSON.stringify(tableName), "]"), "\n          \n          const schemaResult = await client.query(schemaQuery, schemaParams)\n          // A credential column is never searched: a search is an oracle for it.\n          columns = schemaResult.rows.map(row => row.column_name).filter((column) => !__taIsCredentialColumn(column))\n        } catch (schemaError) {\n          console.warn('Failed to fetch column names from information_schema:', schemaError.message)\n        }\n      }\n      if (__rowPolicy) columns = __brpVisibleColumns(__rowPolicy, columns)\n      \n      const search = buildSearchSql(query, columns, paramIndex)\n      if (search) {\n        conditions.push(search.where)\n        queryParams.push(...search.params)\n        paramIndex = search.nextIndex\n        searchFrom = search.from\n      }\n    }\n\n    paramIndex = processFilters(filters, conditions, queryParams, paramIndex)\n    if (__rowPolicy) conditions.push('(' + __rowPolicy.predicate + ')')\n\n    let countSql = `SELECT COUNT(*) FROM ").concat(tableName, "${searchFrom}`\n    if (conditions.length > 0) {\n      countSql += ` WHERE ${conditions.join(' AND ')}`\n    }\n\n    const result = await client.query(countSql, queryParams)\n    const count = parseInt(result.rows[0].count, 10)\n\n    return res.status(200).json({\n      success: true,\n      count: count,\n      timestamp: Date.now()\n    })\n  } catch (error) {\n    console.error('Error getting count:', error)\n    return res.status(error.status || 500).json({\n      success: false,\n      error: error.status ? error.message : 'Failed to get count',\n      timestamp: Date.now()\n    })\n  } finally {\n    if (client) {\n      try {\n        await client.end()\n      } catch (error) {\n        console.error('Error closing database client:', error)\n      }\n    }\n  }\n}\n");
 };
 exports.generateTeleportCountFetcher = generateTeleportCountFetcher;
 //# sourceMappingURL=teleport.js.map

package/dist/cjs/fetchers/teleport.js.map

@@ -1 +1 @@
-{"version":3,"file":"teleport.js","sourceRoot":"","sources":["../../../src/fetchers/teleport.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,sDAK2B;AAC3B,4DAAmG;AACnG,sDAAwD;AACxD,0CAAgF;AAChF,kEAA4E;AAC5E,0DAA8F;AAC9F,oDAAwD;AACxD,iEAA+F;AAC/F,iEAAyE;AACzE,0DAAkE;AAClE,wDAAiF;AACjF,uDAAqD;AAgBrD,IAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,sBAAsB;IAChC,QAAQ,EAAE,kBAAkB;IAC5B,GAAG,EAAE,iBAAiB;CACvB,CAAA;AAED,IAAM,mBAAmB,GAAG,UAAC,KAAc,EAAE,aAAqB;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE;QACxE,OAAO,IAAA,8BAAsB,EAAC,KAAK,CAAC,CAAA;KACrC;IACD,OAAO,sBAAe,aAAa,CAAE,CAAA;AACvC,CAAC,CAAA;AAEM,IAAM,sBAAsB,GAAG,UACpC,MAA+B;IAE/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;KAClE;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC,CAAA;AARY,QAAA,sBAAsB,0BAQlC;AAEM,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,SAAiB,EACjB,gBAA6C;;IAA7C,iCAAA,EAAA,qBAA6C;IAE7C,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA;IACvC,IAAM,WAAW,GAAG,CAAC,CAAA,MAAA,MAAA,QAAQ,CAAC,cAAc,0CAAG,SAAS,CAAC,0CAAE,OAAO,KAAI,EAAE,CAAC;SACtE,GAAG,CAAC,UAAC,MAAM,IAAK,OAAA,MAAM,CAAC,IAAI,EAAX,CAAW,CAAC;SAC5B,MAAM,CAAC,UAAC,IAAI,IAAqB,OAAA,OAAO,IAAI,KAAK,QAAQ,EAAxB,CAAwB,CAAC,CAAA;IAC7D,IAAM,gBAAgB,GAAG,IAAA,2CAAuB,EAAC,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAA;IAE5F,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzE,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzE,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC9F,IAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACrF,IAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAErF,IAAM,OAAO,GACX,QAAQ,CAAC,GAAG,KAAK,KAAK;QACpB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ,CAAC,SAAS;YACpB,CAAC,CAAC,mBAEA,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACnB,CAAC,CAAC,cAAO,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,oBAAoB,CAAC,MAAG;gBAC5E,CAAC,CAAC,EAAE,qBAGN,QAAQ,CAAC,SAAS,CAAC,IAAI;gBACrB,CAAC,CAAC,gBAAS,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,sBAAsB,CAAC,MAAG;gBAClF,CAAC,CAAC,EAAE,qBAGN,QAAQ,CAAC,SAAS,CAAC,GAAG;gBACpB,CAAC,CAAC,eAAQ,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,qBAAqB,CAAC,MAAG;gBAC/E,CAAC,CAAC,EAAE,6CAGR;YACA,CAAC,CAAC,uBAAgB,gBAAgB,CAAC,GAAG,gDAAsC,gBAAgB,CAAC,GAAG,6DAA0D,CAAA;IAE9J,OAAO,UAAG,mCAAgB,iBAE1B,IAAA,gDAA2B,EAAC,gBAAgB,CAAC,kBAAkB,IAAI,EAAE,CAAC,g7BAyB1D,OAAO,udAgBP,OAAO,qCACE,OAAO,2CAChB,OAAO,gCACH,WAAW,gCACX,WAAW,+EAM3B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA4B,EAAC,gCAAa,CAAC,eAC3C,IAAA,+CAA2B,GAAE,eAC7B,IAAA,uCAAqB,EAAC,SAAS,EAAE,gBAAgB,CAAC,eAClD,IAAA,yCAAuB,EAAC,SAAS,EAAE,gBAAgB,CAAC,eACpD,IAAA,iDAA4B,GAAE,6tGAgF9B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,+CAA0B,EAAC,SAAS,CAAC,iBAErC,IAAA,oDAA+B,EAAC,SAAS,CAAC,iBAE1C,IAAA,0CAA8B,EAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,iBAEpE,IAAA,yDAAiC,EAAC,SAAS,CAAC,iBAE5C,IAAA,kDAA8B,EAAC,gBAAgB,CAAC,g7DA8ChD,IAAA,0CAAqB,EAAC,SAAS,EAAE,iCAAiC,CAAC,wFAK/D,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,gKAGD,SAAS,oyDAgCnC,qCAAoB,uCAA6B,qCAAoB,+iBAoBpG,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAIvC,MAAM;QACJ,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAG;QAC7D,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,i+BAyBN,SAAS,6BAAmB,SAAS,mrCAqBwE,qCAAmB,y7BAe5C,qCAAmB,46DA+C3I,IAAA,wCAAsB,EAAC,SAAS,CAAC;QAC/B,CAAC,CAAC,kCAA2B,IAAA,wCAAsB,EAAC,SAAS,CAAC,CAAE;QAChE,CAAC,CAAC,EAAE,iXAOc,IAAA,wCAAsB,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,8lBAalF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,grBAwBlC,CAAA;AACD,CAAC,CAAA;AA7cY,QAAA,uBAAuB,2BA6cnC;AAEM,IAAM,4BAA4B,GAAG,UAC1C,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA,CAAA;IAE5C,OAAO,iDAEP,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,yrBAwB1B,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAI1C,SAAS;QACP,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,MAAG;QAC/E,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,k2BAuBJ,SAAS,uxBA8BpD,CAAA;AACD,CAAC,CAAA;AA7FY,QAAA,4BAA4B,gCA6FxC"}
+{"version":3,"file":"teleport.js","sourceRoot":"","sources":["../../../src/fetchers/teleport.ts"],"names":[],"mappings":";;;AAAA,kCAMiB;AACjB,sDAK2B;AAC3B,4DAAmG;AACnG,sDAAwD;AACxD,0CAAgF;AAChF,kEAA4E;AAC5E,0DAA8F;AAC9F,oDAAwD;AACxD,+DAA0D;AAC1D,iEAImC;AACnC,iEAAyE;AACzE,0DAAkE;AAClE,wDAAiF;AACjF,uDAAqD;AAgBrD,IAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,sBAAsB;IAChC,QAAQ,EAAE,kBAAkB;IAC5B,GAAG,EAAE,iBAAiB;CACvB,CAAA;AAED,IAAM,mBAAmB,GAAG,UAAC,KAAc,EAAE,aAAqB;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE;QACxE,OAAO,IAAA,8BAAsB,EAAC,KAAK,CAAC,CAAA;KACrC;IACD,OAAO,sBAAe,aAAa,CAAE,CAAA;AACvC,CAAC,CAAA;AAEM,IAAM,sBAAsB,GAAG,UACpC,MAA+B;IAE/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAA;KAClE;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAC1B,CAAC,CAAA;AARY,QAAA,sBAAsB,0BAQlC;AAEM,IAAM,uBAAuB,GAAG,UACrC,MAA+B,EAC/B,SAAiB,EACjB,gBAA6C;;IAA7C,iCAAA,EAAA,qBAA6C;IAE7C,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,MAAM,GAAG,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA;IACvC,IAAM,WAAW,GAAG,CAAC,CAAA,MAAA,MAAA,QAAQ,CAAC,cAAc,0CAAG,SAAS,CAAC,0CAAE,OAAO,KAAI,EAAE,CAAC;SACtE,GAAG,CAAC,UAAC,MAAM,IAAK,OAAA,MAAM,CAAC,IAAI,EAAX,CAAW,CAAC;SAC5B,MAAM,CAAC,UAAC,IAAI,IAAqB,OAAA,OAAO,IAAI,KAAK,QAAQ,EAAxB,CAAwB,CAAC,CAAA;IAC7D,IAAM,gBAAgB,GAAG,IAAA,2CAAuB,EAAC,WAAW,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAA;IAE5F,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzE,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzE,IAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC9F,IAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACrF,IAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IAErF,IAAM,OAAO,GACX,QAAQ,CAAC,GAAG,KAAK,KAAK;QACpB,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,QAAQ,CAAC,SAAS;YACpB,CAAC,CAAC,mBAEA,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACnB,CAAC,CAAC,cAAO,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,oBAAoB,CAAC,MAAG;gBAC5E,CAAC,CAAC,EAAE,qBAGN,QAAQ,CAAC,SAAS,CAAC,IAAI;gBACrB,CAAC,CAAC,gBAAS,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,sBAAsB,CAAC,MAAG;gBAClF,CAAC,CAAC,EAAE,qBAGN,QAAQ,CAAC,SAAS,CAAC,GAAG;gBACpB,CAAC,CAAC,eAAQ,mBAAmB,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,qBAAqB,CAAC,MAAG;gBAC/E,CAAC,CAAC,EAAE,6CAGR;YACA,CAAC,CAAC,uBAAgB,gBAAgB,CAAC,GAAG,gDAAsC,gBAAgB,CAAC,GAAG,6DAA0D,CAAA;IAE9J,OAAO,UAAG,mCAAgB,iBAE1B,IAAA,gDAA2B,EAC3B,gBAAgB,CAAC,kBAAkB,IAAI,EAAE,EACzC,gBAAgB,CAAC,aAAa;QAC5B,8BAAY,CAAC,eAAe,CAAC,gBAAgB,CAAC,YAAY,EAAE,EAAE,SAAS,WAAA,EAAE,CAAC,EAC5E,IAAA,wCAAmB,EAAC,MAAM,EAAE,SAAS,CAAC,EACtC,SAAS,EACT,gBAAgB,CACjB,g7BAyBa,OAAO,kgBAY+B,8BAAY,CAAC,qBAAqB,oIAMxE,OAAO,qCACE,OAAO,2CAChB,OAAO,gCACH,WAAW,gCACX,WAAW,qCACN,8BAAY,CAAC,qBAAqB,+EAMvD,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,qCAA6B,GAAE,iBAE/B,IAAA,uCAA+B,GAAE,eACjC,IAAA,+CAA4B,EAAC,gCAAa,CAAC,eAC3C,IAAA,+CAA2B,GAAE,eAC7B,IAAA,uCAAqB,EAAC,SAAS,EAAE,gBAAgB,CAAC,eAClD,IAAA,yCAAuB,EAAC,SAAS,EAAE,gBAAgB,CAAC,eACpD,IAAA,iDAA4B,GAAE,o4GAkF9B,IAAA,iCAAyB,GAAE,iBAE3B,IAAA,+CAA0B,EAAC,SAAS,CAAC,iBAErC,IAAA,oDAA+B,EAAC,SAAS,CAAC,iBAE1C,IAAA,0CAA8B,EAAC,IAAA,6BAAiB,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,iBAEpE,IAAA,yDAAiC,EAAC,SAAS,CAAC,iBAE5C,IAAA,kDAA8B,EAAC,gBAAgB,CAAC,g7DA8ChD,IAAA,0CAAqB,EAAC,SAAS,EAAE,iCAAiC,CAAC,wFAK/D,MAAM,CAAC,CAAC,CAAC,iDAA0C,MAAM,OAAI,CAAC,CAAC,CAAC,EAAE,gKAGD,SAAS,oyDAgCnC,qCAAoB,uCAA6B,qCAAoB,+iBAoBpG,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAIvC,MAAM;QACJ,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAG;QAC7D,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,wmCA0BN,SAAS,6BAAmB,SAAS,mrCAqBwE,qCAAmB,y7BAe5C,qCAAmB,6jEAiD3I,IAAA,wCAAsB,EAAC,SAAS,CAAC;QAC/B,CAAC,CAAC,kCAA2B,IAAA,wCAAsB,EAAC,SAAS,CAAC,CAAE;QAChE,CAAC,CAAC,EAAE,iXAOc,IAAA,wCAAsB,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,8lBAalF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,grBAwBlC,CAAA;AACD,CAAC,CAAA;AA5dY,QAAA,uBAAuB,2BA4dnC;AAEM,IAAM,4BAA4B,GAAG,UAC1C,MAA+B,EAC/B,SAAiB;;IAEjB,IAAM,QAAQ,GAAG,MAA0B,CAAA;IAC3C,IAAM,SAAS,GAAG,CAAC,CAAC,CAAA,MAAA,QAAQ,CAAC,OAAO,0CAAE,MAAM,CAAA,CAAA;IAE5C,OAAO,iDAEP,IAAA,0CAAqB,EAAC,SAAS,EAAE,IAAI,CAAC,yrBAwB1B,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,kGAI1C,SAAS;QACP,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,MAAG;QAC/E,CAAC,CAAC,WAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAG,y+BAwBJ,SAAS,uxBA8BpD,CAAA;AACD,CAAC,CAAA;AA9FY,QAAA,4BAA4B,gCA8FxC"}

package/dist/cjs/fetchers/utils/external-read-guard.d.ts

@@ -0,0 +1,53 @@
+import type { DataReadExposure } from '@teleporthq/teleport-types';
+import { RequestFieldPolicy, SchemaColumn, SessionReaderPlacement } from './table-access-guard';
+/**
+ * The same guard for a read route over an EXTERNAL source (MySQL, MariaDB,
+ * Redshift, ClickHouse, Turso, Supabase, MongoDB, Firestore, Airtable, Redis,
+ * REST, Google Sheets, CSV, JavaScript) as the TeleportHQ / Postgres routes
+ * carry inline: the table's exposure, the protected-table net, a row window of
+ * whole numbers (a browser's capped), request fields of a safe shape, no
+ * credential column in a row, and a generic error to the client.
+ *
+ * The drivers differ in everything else, so the guard wraps the driver's
+ * handler rather than living inside fourteen of them: the driver runs only for
+ * a request the guard let through, with `limit` / `perPage` / `page` /
+ * `offset` replaced by the whole numbers the guard settled on — a driver that
+ * splices them into its SQL text splices digits — and its answer passes back
+ * through the guard, which strips credentials and replaces any error text.
+ */
+/** How a request may name a field for a driver. */
+export type RequestFieldRule = 'identifier' | 'label' | 'any';
+/** SQL drivers splice the field into their statement; document stores read it as a path or an operator. */
+export declare const requestFieldRuleOf: (dataSourceType: string) => RequestFieldRule;
+/**
+ * What a request may name for a driver (see `RequestFieldPolicy`): the
+ * export's schema of the table — required for a SQL driver, so a table without
+ * one answers every named field 400 — and the driver's own shape rule.
+ */
+export declare const driverFieldPolicy: (dataSourceType: string, schemaColumns: string[] | null) => RequestFieldPolicy;
+/**
+ * The columns a browser's search runs over when it names none (N3): the
+ * table's schema — for Supabase, whose PostgREST `ilike` refuses any other
+ * type, its text columns — else, for a source without one, the fields the
+ * project's own bindings read. Never a credential column: what a search
+ * matches, it lets the searcher test character by character.
+ */
+export declare const defaultSearchColumns: (dataSourceType: string, schema: SchemaColumn[] | null, bindingFields: string[]) => string[];
+/**
+ * The driver's fetcher module with the guard around its handler: same
+ * imports, the preamble, the driver renamed, and a guarded `handler` exported
+ * in its place.
+ */
+export declare const guardExternalDriverModule: (driverCode: string, params: {
+    tableName: string;
+    dataSourceType: string;
+    exposure: DataReadExposure;
+    trustedReaderRoles: ReadonlyArray<string>;
+    /** The table's columns as the data source config lists them (null: no schema). */
+    schema?: SchemaColumn[] | null;
+    /** Where the route sits and whether its session reader checks revocation. */
+    reader?: SessionReaderPlacement;
+}) => string;
+/** The driver's count handler behind the same guard (the guard code comes with the handler module). */
+export declare const guardExternalDriverCount: (countCode: string) => string;
+//# sourceMappingURL=external-read-guard.d.ts.map

package/dist/cjs/fetchers/utils/external-read-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-read-guard.d.ts","sourceRoot":"","sources":["../../../../src/fetchers/utils/external-read-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAElE,OAAO,EAEL,kBAAkB,EAClB,YAAY,EACZ,sBAAsB,EACvB,MAAM,sBAAsB,CAAA;AAE7B;;;;;;;;;;;;;;GAcG;AAEH,mDAAmD;AACnD,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,OAAO,GAAG,KAAK,CAAA;AAgB7D,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,mBAAoB,MAAM,KAAG,gBAkB3D,CAAA;AAKD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,mBACZ,MAAM,iBACP,MAAM,EAAE,GAAG,IAAI,KAC7B,kBAQF,CAAA;AAaD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,mBACf,MAAM,UACd,YAAY,EAAE,GAAG,IAAI,iBACd,MAAM,EAAE,KACtB,MAAM,EAQR,CAAA;AA+GD;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,eACxB,MAAM;eAEL,MAAM;oBACD,MAAM;cACZ,gBAAgB;wBACN,cAAc,MAAM,CAAC;IACzC,kFAAkF;aACzE,YAAY,EAAE,GAAG,IAAI;IAC9B,6EAA6E;aACpE,sBAAsB;MAEhC,MAiCF,CAAA;AAED,uGAAuG;AACvG,eAAO,MAAM,wBAAwB,cAAe,MAAM,KAAG,MAU5D,CAAA"}