fastify-auto-sqlapi 0.1.1 → 0.1.3

package/dist/lib/engine/search/search.js

@@ -50,6 +50,21 @@ function resolveFieldRef(field, schema, tableConf, db, alias) {
     err400(`Unknown field: ${field}`);
 }
 // ─── Join lookup ────────────────────────────────────────────
+/**
+ * Tenant-scope a join side-query. When the joined table declares its own `tenantScope`,
+ * appends the tenant condition to `cb` (direct: `col IN ids`; indirect: condition on the
+ * through table) and, for indirect scopes, pushes the INNER JOIN clause into `joins`.
+ * No-op without a tenant context (admin) or when the join table is not tenant-scoped.
+ */
+function appendJoinTenantScope(db, joinTableConf, tenant, joinTableName, cb, joins) {
+    const scope = joinTableConf?.tenantScope;
+    if (!tenant || !scope)
+        return;
+    cb.append(buildTenantCondition(db, scope, tenant.ids));
+    if ('through' in scope) {
+        joins?.push(buildTenantJoin(db, scope, joinTableName));
+    }
+}
 function findJoinByAlias(tableConf, alias) {
     return tableConf.allowedReadJoins?.find((j) => j.alias === alias);
 }
@@ -219,7 +234,7 @@ function buildLeftJoinClauses(db, dbTables, tableConf, aliasesNeedingJoin, joinL
             // Note: extraFilters declared on joinTableConf are not supported here for
             // joinLeft (they would require alias-aware handlers); only schema fields
             // and computed fields apply.
-            const cb = new ConditionBuilder('AND');
+            const cb = new ConditionBuilder('AND', db.cbDialect);
             const joinTableConf = dbTables[joinSchema.tableName];
             const computed = joinTableConf?.computedFields;
             if (ref.filters) {
@@ -328,7 +343,7 @@ async function buildPagination(db, tableConf, where, values, paginator, extraJoi
     };
 }
 // ─── joinMultiple (virtual fetch, child rows in side query) ─
-async function executeJoinMultiple(db, dbTables, tableConf, mainResults, joinMultiple) {
+async function executeJoinMultiple(db, dbTables, tableConf, mainResults, joinMultiple, tenant) {
     const result = {};
     for (const [alias, ref] of Object.entries(joinMultiple)) {
         const joinDef = requireJoin(tableConf, alias, false);
@@ -342,6 +357,8 @@ async function executeJoinMultiple(db, dbTables, tableConf, mainResults, joinMul
         const cb = buildJoinRefCondition(joinTableConf, joinSchema, ref || {}, db);
         const fkCol = joinSchema.col(joinField);
         cb.isIn(db.qi(fkCol), ids);
+        const tenantJoins = [];
+        appendJoinTenantScope(db, joinTableConf, tenant, joinSchema.tableName, cb, tenantJoins);
         let where = cb.build(1, db.ph);
         let values = cb.getValues();
         // Side-channel: computed-field clauses on the join table
@@ -356,17 +373,19 @@ async function executeJoinMultiple(db, dbTables, tableConf, mainResults, joinMul
             columns,
             where,
             values,
+            joins: tenantJoins.length > 0 ? tenantJoins : undefined,
         });
         result[alias] = mapRowsToCamelCase(rows, joinSchema);
     }
     return result;
 }
 // ─── joinLeft (parent fetch via PK IN side query) ───────────
-async function executeJoinLeft(db, tableConf, mainResults, joinLeft) {
+async function executeJoinLeft(db, dbTables, tableConf, mainResults, joinLeft, tenant) {
     const result = {};
     for (const [alias, ref] of Object.entries(joinLeft)) {
         const joinDef = requireJoin(tableConf, alias, true);
         const { joinSchema, joinField, mainField, selection: defaultSelection } = joinDef;
+        const joinTableConf = dbTables[joinSchema.tableName];
         // For joinLeft (N:1), mainField on main is the FK pointing to joinField (PK) on parent.
         // We collect the FK values from the main results and look up parents by their PK.
         const ids = collectIds(mainResults, mainField);
@@ -375,8 +394,10 @@ async function executeJoinLeft(db, tableConf, mainResults, joinLeft) {
             continue;
         }
         const fkCol = joinSchema.col(joinField);
-        const cb = new ConditionBuilder('AND');
+        const cb = new ConditionBuilder('AND', db.cbDialect);
         cb.isIn(db.qi(fkCol), ids);
+        const tenantJoins = [];
+        appendJoinTenantScope(db, joinTableConf, tenant, joinSchema.tableName, cb, tenantJoins);
         const where = cb.build(1, db.ph);
         const values = cb.getValues();
         const selection = ref?.selection ?? defaultSelection;
@@ -386,6 +407,7 @@ async function executeJoinLeft(db, tableConf, mainResults, joinLeft) {
             columns,
             where,
             values,
+            joins: tenantJoins.length > 0 ? tenantJoins : undefined,
         });
         result[alias] = mapRowsToCamelCase(rows, joinSchema);
     }
@@ -412,7 +434,7 @@ function buildByExpression(by, joinSchema, joinTableConf, db) {
     err400(`Unknown field: ${by}`);
 }
 // ─── joinGroup (aggregations) ───────────────────────────────
-async function executeJoinGroup(db, dbTables, tableConf, mainResults, joinGroup) {
+async function executeJoinGroup(db, dbTables, tableConf, mainResults, joinGroup, tenant) {
     const result = {};
     for (const [alias, groupReq] of Object.entries(joinGroup)) {
         const joinDef = requireJoin(tableConf, alias, false);
@@ -454,6 +476,8 @@ async function executeJoinGroup(db, dbTables, tableConf, mainResults, joinGroup)
         const cb = buildJoinRefCondition(joinTableConf, joinSchema, groupRef, db);
         const fkCol = joinSchema.col(joinField);
         cb.isIn(db.qi(fkCol), ids);
+        const tenantJoins = [];
+        appendJoinTenantScope(db, joinTableConf, tenant, joinSchema.tableName, cb, tenantJoins);
         let where = cb.build(1, db.ph);
         let values = cb.getValues();
         // Side-channel: computed-field clauses on the join table
@@ -462,7 +486,8 @@ async function executeJoinGroup(db, dbTables, tableConf, mainResults, joinGroup)
             ({ where, values } = appendComputedConditions(where, values, computedClauses, db));
         }
         const groupBy = groupByParts.length > 0 ? `GROUP BY ${groupByParts.join(', ')}` : '';
-        const sql = `SELECT ${selectParts.join(', ')} FROM ${db.qi(joinSchema.tableName)} WHERE ${where} ${groupBy}`;
+        const fromJoins = tenantJoins.length > 0 ? ` ${tenantJoins.join(' ')}` : '';
+        const sql = `SELECT ${selectParts.join(', ')} FROM ${db.qi(joinSchema.tableName)}${fromJoins} WHERE ${where} ${groupBy}`;
         const queryResult = await db.query(sql, values);
         const rows = queryResult.rows;
         const formatted = {};
@@ -520,8 +545,8 @@ function dispatchConditionMethod(cb, method, colOrExpr, params) {
 }
 function buildJoinRefCondition(joinTableConf, joinSchema, ref, db) {
     const cb = (ref.filters && joinTableConf)
-        ? joinTableConf.filters(ref.filters)
-        : new ConditionBuilder('AND');
+        ? joinTableConf.filters(ref.filters, db.cbDialect)
+        : new ConditionBuilder('AND', db.cbDialect);
     if (ref.conditions?.length) {
         for (const c of ref.conditions) {
             if (!ALLOWED_SET.has(c.method)) {
@@ -641,7 +666,7 @@ function appendComputedConditions(currentWhere, currentValues, clauses, db) {
         // Append the computed's own bound values first; the expr placeholders
         // (if any) reference them via stable indices set by the consumer.
         values = [...values, ...c.values];
-        const tmpCb = new ConditionBuilder('AND');
+        const tmpCb = new ConditionBuilder('AND', db.cbDialect);
         dispatchConditionMethod(tmpCb, c.method, c.expr, c.params);
         const startIdx = values.length + 1;
         const clauseSql = tmpCb.build(startIdx, db.ph);
@@ -666,7 +691,7 @@ function appendAggConditions(currentWhere, currentValues, conditions, db, dbTabl
         const [alias, fn, field] = parts;
         const { expr, values: exprValues } = buildAggOrderExpr(db, dbTables, tableConf, alias, fn, field, joinGroup, values.length + 1);
         values = [...values, ...exprValues];
-        const tmpCb = new ConditionBuilder('AND');
+        const tmpCb = new ConditionBuilder('AND', db.cbDialect);
         dispatchConditionMethod(tmpCb, c.method, expr, c.params);
         const startIdx = values.length + 1;
         const clause = tmpCb.build(startIdx, db.ph);
@@ -676,7 +701,7 @@ function appendAggConditions(currentWhere, currentValues, conditions, db, dbTabl
     return { where, values };
 }
 // ─── joinMustExist (EXISTS subquery filter on main) ─────────
-function buildJoinMustExistClauses(db, dbTables, tableConf, joinMustExist, currentWhere, currentValues) {
+function buildJoinMustExistClauses(db, dbTables, tableConf, joinMustExist, currentWhere, currentValues, tenant) {
     let where = currentWhere;
     const values = [...currentValues];
     for (const [alias, ref] of Object.entries(joinMustExist)) {
@@ -685,6 +710,8 @@ function buildJoinMustExistClauses(db, dbTables, tableConf, joinMustExist, curre
         const joinTableConf = dbTables[joinSchema.tableName];
         const refs = extractJoinRefs(db, tableConf, joinDef);
         const filterCondition = buildJoinRefCondition(joinTableConf, joinSchema, ref, db);
+        const tenantJoins = [];
+        appendJoinTenantScope(db, joinTableConf, tenant, joinSchema.tableName, filterCondition, tenantJoins);
         const startIdx = values.length + 1;
         let filterWhere = filterCondition.build(startIdx, db.ph);
         let filterVals = [...filterCondition.getValues()];
@@ -699,10 +726,13 @@ function buildJoinMustExistClauses(db, dbTables, tableConf, joinMustExist, curre
             filterVals = cvalues.slice(values.length);
             filterWhere = cwhere;
         }
+        // Qualify the FK with the join table: the EXISTS FROM may include the tenant
+        // through-join, so a bare column could become ambiguous.
         const innerWhere = filterWhere
-            ? `${refs.fkCol} = ${refs.mainTable}.${refs.mainCol} AND ${filterWhere}`
-            : `${refs.fkCol} = ${refs.mainTable}.${refs.mainCol}`;
-        where += ` AND EXISTS (SELECT 1 FROM ${refs.joinTable} WHERE ${innerWhere})`;
+            ? `${refs.joinTable}.${refs.fkCol} = ${refs.mainTable}.${refs.mainCol} AND ${filterWhere}`
+            : `${refs.joinTable}.${refs.fkCol} = ${refs.mainTable}.${refs.mainCol}`;
+        const existsJoins = tenantJoins.length > 0 ? ` ${tenantJoins.join(' ')}` : '';
+        where += ` AND EXISTS (SELECT 1 FROM ${refs.joinTable}${existsJoins} WHERE ${innerWhere})`;
         values.push(...filterVals);
     }
     return { where, values };
@@ -724,7 +754,7 @@ export async function searchEngine(dbTables, params) {
         for (const a of Object.keys(joinLeft))
             requireJoin(tableConf, a, true);
     // Build main condition
-    const condition = tableConf.filters(filters || {});
+    const condition = tableConf.filters(filters || {}, db.cbDialect);
     // Filters that target computed fields (declared on tableConf.computedFields)
     // are applied via the side-channel pattern further down.
     let computedFilterClauses = [];
@@ -755,7 +785,7 @@ export async function searchEngine(dbTables, params) {
     }
     // joinMustExist (EXISTS)
     if (joinMustExist && Object.keys(joinMustExist).length > 0) {
-        ({ where, values } = buildJoinMustExistClauses(db, dbTables, tableConf, joinMustExist, where, values));
+        ({ where, values } = buildJoinMustExistClauses(db, dbTables, tableConf, joinMustExist, where, values, tenant));
     }
     // Aggregation conditions (HAVING-style)
     if (conditions?.length) {
@@ -805,13 +835,13 @@ export async function searchEngine(dbTables, params) {
     }
     const result = { main };
     if (joinMultiple && Object.keys(joinMultiple).length > 0) {
-        result.joinMultiple = await executeJoinMultiple(db, dbTables, tableConf, main, joinMultiple);
+        result.joinMultiple = await executeJoinMultiple(db, dbTables, tableConf, main, joinMultiple, tenant);
     }
     if (joinLeft && Object.keys(joinLeft).length > 0) {
-        result.joinLeft = await executeJoinLeft(db, tableConf, main, joinLeft);
+        result.joinLeft = await executeJoinLeft(db, dbTables, tableConf, main, joinLeft, tenant);
     }
     if (joinGroup && Object.keys(joinGroup).length > 0) {
-        result.joinGroup = await executeJoinGroup(db, dbTables, tableConf, main, joinGroup);
+        result.joinGroup = await executeJoinGroup(db, dbTables, tableConf, main, joinGroup, tenant);
     }
     if (pagination) {
         result.pagination = pagination;

package/dist/lib/sql-api.js

@@ -99,7 +99,7 @@ export class SqlApi {
     async delete(tableName, id, request) {
         const tableConf = this.getTableConf(tableName);
         const tenant = await this.getTenant(tableName, request);
-        return deleteEngine({ db: this.db, tableConf, id, tenant });
+        return deleteEngine({ db: this.db, tableConf, id, tenant, request });
     }
     async bulkUpsert(tableName, items, request) {
         const tableConf = this.getTableConf(tableName);
@@ -116,7 +116,7 @@ export class SqlApi {
     async bulkDelete(tableName, ids, request) {
         const tableConf = this.getTableConf(tableName);
         const tenant = await this.getTenant(tableName, request);
-        return bulkDeleteEngine({ db: this.db, tableConf, ids, tenant });
+        return bulkDeleteEngine({ db: this.db, tableConf, ids, tenant, request });
     }
 }
 export function createSqlApi(dbOrPool, dbTables, options) {

package/dist/lib/table-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAYrB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA0BhG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAKX;AA2CD,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAShB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}
+{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA0BhG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAKX;AA2CD,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAShB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}

package/dist/lib/table-helpers.js

@@ -1,19 +1,20 @@
 import { ConditionBuilder } from 'node-condition-builder';
 import { getDialect } from './dialect.js';
-// Quote an identifier using the current global ConditionBuilder dialect.
-// Needed so that DB columns with uppercase letters (e.g. betterauth "userId")
-// are preserved on PostgreSQL (which folds unquoted identifiers to lowercase)
-// and on MySQL (which is case-sensitive on Linux filesystems).
-function qi(field) {
-    return getDialect(ConditionBuilder.DIALECT).qi(field);
+// Quote an identifier using the given ConditionBuilder dialect (or the global
+// default when not provided). Needed so that DB columns with uppercase letters
+// (e.g. betterauth "userId") are preserved on PostgreSQL (which folds unquoted
+// identifiers to lowercase) and on MySQL (which is case-sensitive on Linux
+// filesystems).
+function qi(field, dialect) {
+    return getDialect(dialect ?? ConditionBuilder.DIALECT).qi(field);
 }
 export function exportTableInfo(Schema, extraFilters = {}, extendedCondition) {
-    const filters = (filterValues) => {
-        const condition = new ConditionBuilder('AND');
+    const filters = (filterValues, dialect) => {
+        const condition = new ConditionBuilder('AND', dialect);
         // Only auto-match real schema fields (DB columns)
         for (const field of Object.keys(Schema.fields)) {
             if (field in filterValues && filterValues[field] !== null && filterValues[field] !== undefined) {
-                condition.isEqual(qi(Schema.col(field)), filterValues[field]);
+                condition.isEqual(qi(Schema.col(field), dialect), filterValues[field]);
             }
         }
         // extraFilters are handled exclusively by extendedCondition

package/dist/lib/tenant.d.ts

@@ -32,11 +32,18 @@ export declare function enforceTenantOnWrites(db: QueryClient, tenant: TenantCon
  * Returns undefined for indirect or no-tenant scenarios — those are handled separately
  * (indirect uses pre-check via `assertTenantOwnership`).
  */
-export declare function buildTenantUpdateExtra(tenant: TenantContext | undefined): ConditionBuilder | undefined;
+export declare function buildTenantUpdateExtra(db: QueryClient, tenant: TenantContext | undefined): ConditionBuilder | undefined;
 /**
  * For update with indirect tenant: pre-check ownership via `SELECT 1 ... INNER JOIN ... LIMIT 1`.
  * Throws 404 if the record either does not exist or does not belong to the tenant.
  * No-op for direct or no-tenant — those are enforced via `extraCondition` in the UPDATE itself.
  */
-export declare function assertTenantOwnership(db: QueryClient, tenant: TenantContext | undefined, tableName: string, pkCol: string, pkValue: ConditionValue): Promise<void>;
+export declare function assertTenantOwnership(db: QueryClient, tenant: TenantContext | undefined, tableName: string, pkCol: string | string[], pkValue: ConditionValue | ConditionValue[]): Promise<void>;
+/**
+ * Assert that EVERY pk in `ids` exists and belongs to the tenant, for both direct and indirect
+ * scopes. Throws 404 if any id is missing or not owned. No-op when `tenant` is undefined or `ids`
+ * is empty. Used by the delete engines to enforce tenant ownership BEFORE running a `beforeDelete`/
+ * `beforeBulkDelete` hook, so user code never runs against rows the caller cannot access.
+ */
+export declare function assertTenantOwnsAll(db: QueryClient, tenant: TenantContext | undefined, tableName: string, pkCol: string, ids: ConditionValue[]): Promise<void>;
 //# sourceMappingURL=tenant.d.ts.map

package/dist/lib/tenant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../src/lib/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EACV,MAAM,EACN,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,aAAa,EACd,MAAM,aAAa,CAAC;AAMrB,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CASpC;AAED,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,GACpB,gBAAgB,CAclB;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,MAAM,GACpB,MAAM,CAMR;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAiBN;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,OAAO,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,GAAG,cAAc,EAAE,EACrD,MAAM,EAAE,aAAa,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAsBtC;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,GACjB,IAAI,CAGN;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,GAAG,SAAS,GAChC,gBAAgB,GAAG,SAAS,CAM9B;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,IAAI,CAAC,CAUf"}
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../src/lib/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EACV,MAAM,EACN,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,aAAa,EACd,MAAM,aAAa,CAAC;AAMrB,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CASpC;AAED,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,GACpB,gBAAgB,CAclB;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,MAAM,GACpB,MAAM,CAMR;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAiBN;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,OAAO,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,GAAG,cAAc,EAAE,EACrD,MAAM,EAAE,aAAa,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAsBtC;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,GACjB,IAAI,CAGN;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,GAChC,gBAAgB,GAAG,SAAS,CAM9B;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EACxB,OAAO,EAAE,cAAc,GAAG,cAAc,EAAE,GACzC,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,cAAc,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/lib/tenant.js

@@ -24,7 +24,7 @@ export function buildTenantCondition(db, scope, tenantIds) {
     else {
         qualifier = db.qi(col);
     }
-    const cb = new ConditionBuilder('AND');
+    const cb = new ConditionBuilder('AND', db.cbDialect);
     cb.isIn(qualifier, tenantIds);
     return cb;
 }
@@ -59,7 +59,7 @@ export async function validateTenantFK(db, scope, tenantIds, fkValues) {
     const throughTable = scope.through.schema.tableName;
     const foreignField = scope.through.foreignField;
     const tenantCol = scope.column;
-    const cb = new ConditionBuilder('AND');
+    const cb = new ConditionBuilder('AND', db.cbDialect);
     cb.isIn(db.qi(foreignField), uniqueFKs);
     cb.isNotIn(db.qi(tenantCol), tenantIds);
     const where = cb.build(1, db.ph);
@@ -77,7 +77,7 @@ export async function validateTenantFK(db, scope, tenantIds, fkValues) {
  */
 export function buildTenantDeleteWhere(db, tableName, pkCol, pkValue, tenant) {
     if (isIndirect(tenant.scope)) {
-        const innerCb = new ConditionBuilder('AND');
+        const innerCb = new ConditionBuilder('AND', db.cbDialect);
         innerCb.isIn(`${db.qi(tableName)}.${db.qi(pkCol)}`, (Array.isArray(pkValue) ? pkValue : [pkValue]));
         innerCb.append(buildTenantCondition(db, tenant.scope, tenant.ids));
         const innerWhere = innerCb.build(1, db.ph);
@@ -86,7 +86,7 @@ export function buildTenantDeleteWhere(db, tableName, pkCol, pkValue, tenant) {
         const where = `${db.qi(pkCol)} IN (SELECT ${db.qi(tableName)}.${db.qi(pkCol)} FROM ${db.qi(tableName)} ${joinSql} WHERE ${innerWhere})`;
         return { where, values };
     }
-    const cb = new ConditionBuilder('AND');
+    const cb = new ConditionBuilder('AND', db.cbDialect);
     if (Array.isArray(pkValue)) {
         cb.isIn(db.qi(pkCol), pkValue);
     }
@@ -129,10 +129,10 @@ export async function enforceTenantOnWrites(db, tenant, records) {
  * Returns undefined for indirect or no-tenant scenarios — those are handled separately
  * (indirect uses pre-check via `assertTenantOwnership`).
  */
-export function buildTenantUpdateExtra(tenant) {
+export function buildTenantUpdateExtra(db, tenant) {
     if (!tenant || isIndirect(tenant.scope))
         return undefined;
-    const cb = new ConditionBuilder('AND');
+    const cb = new ConditionBuilder('AND', db.cbDialect);
     if (tenant.ids.length === 1)
         cb.isEqual(tenant.scope.column, tenant.ids[0]);
     else
@@ -147,8 +147,10 @@ export function buildTenantUpdateExtra(tenant) {
 export async function assertTenantOwnership(db, tenant, tableName, pkCol, pkValue) {
     if (!tenant || !isIndirect(tenant.scope))
         return;
-    const cb = new ConditionBuilder('AND');
-    cb.isEqual(`${db.qi(tableName)}.${db.qi(pkCol)}`, pkValue);
+    const cb = new ConditionBuilder('AND', db.cbDialect);
+    const cols = Array.isArray(pkCol) ? pkCol : [pkCol];
+    const vals = Array.isArray(pkValue) ? pkValue : [pkValue];
+    cols.forEach((c, i) => cb.isEqual(`${db.qi(tableName)}.${db.qi(c)}`, vals[i]));
     cb.append(buildTenantCondition(db, tenant.scope, tenant.ids));
     const sql = `SELECT 1 FROM ${db.qi(tableName)} ${buildTenantJoin(db, tenant.scope, tableName)} WHERE ${cb.build(1, db.ph)} LIMIT 1`;
     const r = await db.query(sql, cb.getValues());
@@ -156,3 +158,24 @@ export async function assertTenantOwnership(db, tenant, tableName, pkCol, pkValu
         throw httpError(404, 'Record not found');
     }
 }
+/**
+ * Assert that EVERY pk in `ids` exists and belongs to the tenant, for both direct and indirect
+ * scopes. Throws 404 if any id is missing or not owned. No-op when `tenant` is undefined or `ids`
+ * is empty. Used by the delete engines to enforce tenant ownership BEFORE running a `beforeDelete`/
+ * `beforeBulkDelete` hook, so user code never runs against rows the caller cannot access.
+ */
+export async function assertTenantOwnsAll(db, tenant, tableName, pkCol, ids) {
+    if (!tenant || !ids.length)
+        return;
+    const qualifiedPk = `${db.qi(tableName)}.${db.qi(pkCol)}`;
+    const cb = new ConditionBuilder('AND', db.cbDialect);
+    cb.isIn(qualifiedPk, ids);
+    cb.append(buildTenantCondition(db, tenant.scope, tenant.ids));
+    const join = isIndirect(tenant.scope) ? ` ${buildTenantJoin(db, tenant.scope, tableName)}` : '';
+    const sql = `SELECT DISTINCT ${qualifiedPk} AS pk FROM ${db.qi(tableName)}${join} WHERE ${cb.build(1, db.ph)}`;
+    const r = await db.query(sql, cb.getValues());
+    const uniqueRequested = new Set(ids.map((v) => String(v))).size;
+    if (r.rows.length < uniqueRequested) {
+        throw httpError(404, 'Record not found');
+    }
+}

package/dist/routes/auto/bulk-delete.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bulk-delete.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/bulk-delete.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,gBAAgB,CAC5C,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiBf"}
+{"version":3,"file":"bulk-delete.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/bulk-delete.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,gBAAgB,CAC5C,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/routes/auto/bulk-delete.routes.js

@@ -3,6 +3,7 @@ import { primaryAsString } from '../../types.js';
 import { registerForAllTables } from './route-helpers.js';
 export default async function bulkDeleteRoutes(fastify, options) {
     await registerForAllTables(fastify, options, {
+        operation: 'bulkDelete',
         method: 'POST',
         url: (tc) => `/bulk/${tc.Schema.tableName}/delete`,
         successStatus: 200,

package/dist/routes/auto/bulk-upsert.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bulk-upsert.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/bulk-upsert.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAkB,MAAM,gBAAgB,CAAC;AAE1E,wBAA8B,gBAAgB,CAC5C,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"bulk-upsert.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/bulk-upsert.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAkB,MAAM,gBAAgB,CAAC;AAE1E,wBAA8B,gBAAgB,CAC5C,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/routes/auto/bulk-upsert.routes.js

@@ -2,6 +2,7 @@ import { BulkUpsertTableBody, BulkUpsertTableResponse } from '../../lib/schema/b
 import { registerForAllTables, buildWriteDescription } from './route-helpers.js';
 export default async function bulkUpsertRoutes(fastify, options) {
     await registerForAllTables(fastify, options, {
+        operation: 'bulkUpsert',
         method: 'PUT',
         url: (tc) => `/bulk/${tc.Schema.tableName}`,
         successStatus: 200,

package/dist/routes/auto/delete.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/delete.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,YAAY,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAmBf"}
+{"version":3,"file":"delete.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/delete.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,YAAY,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/dist/routes/auto/delete.routes.js

@@ -3,6 +3,7 @@ import { primaryAsString } from '../../types.js';
 import { registerForAllTables } from './route-helpers.js';
 export default async function deleteRoutes(fastify, options) {
     await registerForAllTables(fastify, options, {
+        operation: 'delete',
         method: 'DELETE',
         url: (tc) => `/rest/${tc.Schema.tableName}/:id`,
         successStatus: 200,

package/dist/routes/auto/get.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/get.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,SAAS,CACrC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"get.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/get.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,SAAS,CACrC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/routes/auto/get.routes.js

@@ -2,6 +2,7 @@ import { Type } from '@sinclair/typebox';
 import { registerForAllTables } from './route-helpers.js';
 export default async function getRoutes(fastify, options) {
     await registerForAllTables(fastify, options, {
+        operation: 'get',
         method: 'GET',
         url: (tc) => `/rest/${tc.Schema.tableName}/:id`,
         successStatus: 200,

package/dist/routes/auto/insert.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"insert.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/insert.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,YAAY,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAsBf"}
+{"version":3,"file":"insert.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/insert.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,YAAY,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/routes/auto/insert.routes.js

@@ -2,6 +2,7 @@ import { InsertTableBody, InsertTableResponse } from '../../lib/schema/insert.js
 import { registerForAllTables, buildWriteDescription } from './route-helpers.js';
 export default async function insertRoutes(fastify, options) {
     await registerForAllTables(fastify, options, {
+        operation: 'insert',
         method: 'POST',
         url: (tc) => `/rest/${tc.Schema.tableName}`,
         successStatus: 201,

package/dist/routes/auto/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAO7D,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AASjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB;CACF;kCAGU,eAAe,WACf,mBAAmB,KAC3B,OAAO,CAAC,IAAI,CAAC;AAHhB,wBAqFoC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAO7D,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AASjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB;CACF;kCAuDU,eAAe,WACf,mBAAmB,KAC3B,OAAO,CAAC,IAAI,CAAC;AAHhB,wBAiFoC"}

package/dist/routes/auto/plugin.js

@@ -13,6 +13,45 @@ import updateRoutes from './update.routes.js';
 import deleteRoutes from './delete.routes.js';
 import bulkUpsertRoutes from './bulk-upsert.routes.js';
 import bulkDeleteRoutes from './bulk-delete.routes.js';
+// Schema combinators for which Ajv reports one error per failed branch plus a
+// single combinator-level summary error, all targeting the same path.
+const COMBINATOR_KEYWORDS = new Set(['anyOf', 'oneOf']);
+/**
+ * Converts Ajv validation errors into response fields, stripping the noise Ajv
+ * emits for schema combinators.
+ *
+ * An enum modelled as `anyOf` of `const`s fails every branch when invalid, so Ajv
+ * produces one `const` error per branch plus an `anyOf` error — all on the same
+ * path. We keep only the combinator error for those paths and drop the per-branch
+ * errors, then deduplicate any remaining identical entries. `required` errors are
+ * re-pointed from the parent object to the actually missing property.
+ */
+function normalizeAjvErrors(errors) {
+    const toPath = (v) => {
+        const path = (v.instancePath || '').replace(/\//g, '.').replace(/^\./, '');
+        const missing = v.params?.missingProperty;
+        if (v.keyword === 'required' && missing) {
+            return path ? `${path}.${missing}` : missing;
+        }
+        return path;
+    };
+    const mapped = errors.map((v) => ({
+        path: toPath(v),
+        message: v.message || 'invalid',
+        code: v.keyword || 'unknown',
+    }));
+    const combinatorPaths = new Set(mapped.filter((f) => COMBINATOR_KEYWORDS.has(f.code)).map((f) => f.path));
+    const seen = new Set();
+    return mapped.filter((f) => {
+        if (combinatorPaths.has(f.path) && !COMBINATOR_KEYWORDS.has(f.code))
+            return false;
+        const key = `${f.path}|${f.code}|${f.message}`;
+        if (seen.has(key))
+            return false;
+        seen.add(key);
+        return true;
+    });
+}
 export default fp(async function fastifyAutoSqlApi(fastify, options) {
     // Set ConditionBuilder dialect globally
     const dialect = getDialect(options.dialect || 'postgres');
@@ -49,11 +88,7 @@ export default fp(async function fastifyAutoSqlApi(fastify, options) {
         instance.setErrorHandler((error, request, reply) => {
             // Schema validation errors (Ajv)
             if (error.validation) {
-                const fields = error.validation.map((v) => ({
-                    path: (v.instancePath || '').replace(/\//g, '.').replace(/^\./, ''),
-                    message: v.message || 'invalid',
-                    code: v.keyword || 'unknown',
-                }));
+                const fields = normalizeAjvErrors(error.validation);
                 return reply.status(400).send({
                     statusCode: 400,
                     error: 'Bad Request',

package/dist/routes/auto/route-helpers.d.ts

@@ -1,5 +1,5 @@
 import type { FastifyInstance, FastifyRequest, FastifyReply } from 'fastify';
-import type { ITable, SqlApiPluginOptions, DbTables } from '../../types.js';
+import type { ITable, SqlApiPluginOptions, DbTables, TableOperation } from '../../types.js';
 type RequestHook = (request: FastifyRequest, reply: FastifyReply) => Promise<void | FastifyReply>;
 export declare function mergeOnRequests(options: SqlApiPluginOptions, tableConf: ITable): RequestHook[];
 export declare function buildWriteDescription(action: string, tableName: string, tableConf: ITable): string;
@@ -10,6 +10,8 @@ interface RouteSchema {
     response?: any;
 }
 export interface AutoRouteSpec {
+    /** Operation key matched against `ITable.operations` to decide whether to register the route. */
+    operation: TableOperation;
     method: 'GET' | 'POST' | 'PUT' | 'DELETE';
     /** URL builder receiving the table configuration to read `Schema.tableName`. */
     url: (tableConf: ITable) => string;

package/dist/routes/auto/route-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/route-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE5E,KAAK,WAAW,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;AAElG,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAE9F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQlG;AAED,UAAU,WAAW;IAEnB,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX,MAAM,CAAC,EAAE,GAAG,CAAC;IAEb,WAAW,CAAC,EAAE,GAAG,CAAC;IAElB,QAAQ,CAAC,EAAE,GAAG,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1C,gFAAgF;IAChF,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,aAAa,EAAE,GAAG,GAAG,GAAG,CAAC;IACzB,wIAAwI;IACxI,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,WAAW,CAAC;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC;IACpF;2EACuE;IACvE,MAAM,EAAE,CACN,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CA8Bf"}
+{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/route-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE5F,KAAK,WAAW,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;AAElG,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAE9F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQlG;AAED,UAAU,WAAW;IAEnB,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX,MAAM,CAAC,EAAE,GAAG,CAAC;IAEb,WAAW,CAAC,EAAE,GAAG,CAAC;IAElB,QAAQ,CAAC,EAAE,GAAG,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,iGAAiG;IACjG,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1C,gFAAgF;IAChF,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,aAAa,EAAE,GAAG,GAAG,GAAG,CAAC;IACzB,wIAAwI;IACxI,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,WAAW,CAAC;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC;IACpF;2EACuE;IACvE,MAAM,EAAE,CACN,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/dist/routes/auto/route-helpers.js

@@ -18,6 +18,9 @@ export function buildWriteDescription(action, tableName, tableConf) {
 export async function registerForAllTables(fastify, options, spec) {
     const { DbTables } = options;
     for (const [tableName, tableConf] of Object.entries(DbTables)) {
+        // operations acts as a whitelist; when omitted every operation is exposed.
+        if (tableConf.operations && !tableConf.operations.includes(spec.operation))
+            continue;
         const schemas = spec.schemas(DbTables, tableName, tableConf);
         // Only include schema keys that are actually defined: Fastify checks for key
         // *presence* (not undefined value) to decide whether to emit FSTWRN001.

package/dist/routes/auto/search.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/search.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,YAAY,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiDf"}
+{"version":3,"file":"search.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/search.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,YAAY,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAkDf"}

package/dist/routes/auto/search.routes.js

@@ -2,6 +2,7 @@ import { SearchTableBodyPost, SearchTableQueryString, SearchTableResponse } from
 import { registerForAllTables } from './route-helpers.js';
 export default async function searchRoutes(fastify, options) {
     await registerForAllTables(fastify, options, {
+        operation: 'search',
         method: 'POST',
         url: (tc) => `/search/${tc.Schema.tableName}`,
         successStatus: 200,

package/dist/routes/auto/update.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/update.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,YAAY,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAwBf"}
+{"version":3,"file":"update.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/update.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,YAAY,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAyBf"}

package/dist/routes/auto/update.routes.js

@@ -2,6 +2,7 @@ import { UpdateTableBody, UpdateTableResponse } from '../../lib/schema/update.js
 import { registerForAllTables, buildWriteDescription } from './route-helpers.js';
 export default async function updateRoutes(fastify, options) {
     await registerForAllTables(fastify, options, {
+        operation: 'update',
         method: 'PUT',
         url: (tc) => `/rest/${tc.Schema.tableName}`,
         successStatus: 200,

package/dist/types/cli.d.ts

@@ -11,12 +11,18 @@ export interface ColumnInfo {
     udt_name: string;
     column_default: string | null;
     is_nullable: string;
+    /** True when the column is part of the table's PRIMARY KEY (from information_schema). */
+    is_primary?: boolean;
+    /** True for auto-generated columns without a visible default (mysql AUTO_INCREMENT). */
+    is_auto_increment?: boolean;
 }
 export interface TableMap {
     [schemaName: string]: {
         name: string;
         fields: Record<string, string>;
         colMap: Record<string, string>;
+        /** PRIMARY KEY fields (camelCase), in table column order. Empty when unknown. */
+        primary: string[];
     };
 }
 //# sourceMappingURL=cli.d.ts.map