fastify-auto-sqlapi 0.1.14 → 0.2.1

package/dist/lib/schema/search.js

@@ -1,5 +1,5 @@
 import { Type } from '@sinclair/typebox';
-import { ALLOWED_METHODS } from '../condition-methods.js';
+import { ALLOWED_METHODS, MAX_CONDITIONS, MAX_ORDER_BY_LENGTH } from '../condition-methods.js';
 import { readableFieldNames } from '../read-access.js';
 import { DEFAULT_MAX_ITEMS_PER_PAGE } from '../../types.js';
 /** Schema fields minus the ones hidden by `readExclude`. */
@@ -24,6 +24,100 @@ function readableFields(schema, tableConf) {
 function filtersObject(fields) {
     return Type.Partial(Type.Object(fields));
 }
+/**
+ * TypeBox types declared by a table's computed fields.
+ *
+ * Each computed is dry-run with a stub context purely to read its declared `type`; the
+ * functions are pure with respect to that context. Best-effort by design — a computed that
+ * throws is skipped, because this only feeds the Swagger/body schema and the engine
+ * validates for real at request time.
+ */
+function computedFieldTypes(tableConf) {
+    const out = {};
+    for (const [name, fn] of Object.entries(tableConf?.computedFields ?? {})) {
+        try {
+            const stub = fn({
+                db: { qi: (s) => s, dialectName: 'postgres' },
+                qiCol: () => '""',
+            });
+            if (stub.type)
+                out[name] = stub.type;
+        }
+        catch {
+            // ignore — schema generation is best-effort; runtime validates.
+        }
+    }
+    return out;
+}
+function buildJoinBodyProps(dbTables, tableConf, conditionItemSchema) {
+    const props = {
+        joinMustExist: {},
+        joinMultiple: {},
+        joinGroup: {},
+        joinLeft: {},
+    };
+    for (const joinDef of tableConf.allowedReadJoins ?? []) {
+        const { joinSchema, alias, unique } = joinDef;
+        const joinTableConf = dbTables[joinSchema.tableName];
+        const joinSchemaFields = joinTableConf
+            ? { ...readableFields(joinSchema, joinTableConf), ...computedFieldTypes(joinTableConf) }
+            : { ...joinSchema.fields };
+        // `extraFilters` are only honoured where the engine delegates to the join table's
+        // own `filters()` — buildJoinRefCondition, i.e. the unique:false paths. joinLeft
+        // builds its condition inline (buildLeftJoinClauses) and handles schema and computed
+        // fields only, so advertising extraFilters there would promise a silent no-op.
+        const joinFilterFields = { ...joinSchemaFields, ...(joinTableConf?.extraFilters ?? {}) };
+        const joinRefShape = {
+            filters: Type.Optional(filtersObject(joinFilterFields)),
+            conditions: Type.Optional(Type.Array(conditionItemSchema, { maxItems: MAX_CONDITIONS })),
+        };
+        if (unique) {
+            props.joinLeft[alias] = Type.Object({
+                filters: Type.Optional(filtersObject(joinSchemaFields)),
+                conditions: Type.Optional(Type.Array(conditionItemSchema, { maxItems: MAX_CONDITIONS })),
+                selection: Type.Optional(Type.String()),
+            });
+            continue;
+        }
+        props.joinMustExist[alias] = Type.Object(joinRefShape);
+        props.joinMultiple[alias] = Type.Object({
+            ...joinRefShape,
+            selection: Type.Optional(Type.String()),
+        });
+        props.joinGroup[alias] = Type.Object({
+            aggregations: Type.Object({
+                by: Type.Optional(Type.String()),
+                distinctCount: Type.Optional(Type.Array(Type.String())),
+                min: Type.Optional(Type.Array(Type.String())),
+                max: Type.Optional(Type.Array(Type.String())),
+                sum: Type.Optional(Type.Array(Type.String())),
+                avg: Type.Optional(Type.Array(Type.String())),
+                count: Type.Optional(Type.Array(Type.String())),
+            }),
+            filters: Type.Optional(filtersObject(joinFilterFields)),
+            conditions: Type.Optional(Type.Array(conditionItemSchema, { maxItems: MAX_CONDITIONS })),
+        });
+    }
+    return props;
+}
+/** Per-alias *response* shapes: the rows each join family contributes to the result. */
+function buildJoinResponseProps(dbTables, tableConf) {
+    const joinMultipleProps = {};
+    const joinLeftProps = {};
+    const joinGroupProps = {};
+    for (const joinDef of tableConf.allowedReadJoins ?? []) {
+        const { joinSchema, alias, unique } = joinDef;
+        const itemArray = Type.Array(Type.Partial(Type.Object(readableFields(joinSchema, dbTables[joinSchema.tableName]))));
+        if (unique) {
+            joinLeftProps[alias] = itemArray;
+        }
+        else {
+            joinMultipleProps[alias] = itemArray;
+            joinGroupProps[alias] = JoinGroupResultItem;
+        }
+    }
+    return { joinMultipleProps, joinLeftProps, joinGroupProps };
+}
 const JoinGroupResultItem = Type.Object({
     sum: Type.Optional(Type.Record(Type.String(), Type.Any())),
     min: Type.Optional(Type.Record(Type.String(), Type.Any())),
@@ -42,113 +136,28 @@ export function SearchTableBodyPost(dbTables, tableName) {
         method: methodEnum,
         params: Type.Optional(Type.Array(Type.Any())),
     });
-    // Build a TypeBox map of computed-field types (declared in defineTable).
-    const computedTypes = {};
-    if (tableConf.computedFields) {
-        for (const [name, fn] of Object.entries(tableConf.computedFields)) {
-            // Cheap dry-run with a stub context to extract the declared `type`.
-            // The fn is pure-functional w.r.t. ctx — only `type` is read here.
-            try {
-                const stub = fn({
-                    db: { qi: (s) => s, dialectName: 'postgres' },
-                    qiCol: () => '""',
-                });
-                if (stub.type)
-                    computedTypes[name] = stub.type;
-            }
-            catch {
-                // ignore — Swagger schema generation is best-effort; runtime validates.
-            }
-        }
-    }
+    const computedTypes = computedFieldTypes(tableConf);
     const filterFields = {
         ...readableFields(schema, tableConf),
         ...tableConf.extraFilters,
         ...computedTypes,
     };
     const filtersSchema = Type.Optional(filtersObject(filterFields));
-    // Per-alias entries split by unique flag:
-    //  - unique:false → joinMustExist / joinMultiple / joinGroup
-    //  - unique:true  → joinLeft
-    const joinMustExistProps = {};
-    const joinMultipleProps = {};
-    const joinGroupProps = {};
-    const joinLeftProps = {};
-    if (tableConf.allowedReadJoins) {
-        for (const joinDef of tableConf.allowedReadJoins) {
-            const { joinSchema, alias, unique } = joinDef;
-            const joinTableConf = dbTables[joinSchema.tableName];
-            const joinComputedTypes = {};
-            if (joinTableConf?.computedFields) {
-                for (const [name, fn] of Object.entries(joinTableConf.computedFields)) {
-                    try {
-                        const stub = fn({
-                            db: { qi: (s) => s, dialectName: 'postgres' },
-                            qiCol: () => '""',
-                        });
-                        if (stub.type)
-                            joinComputedTypes[name] = stub.type;
-                    }
-                    catch {
-                        // best-effort
-                    }
-                }
-            }
-            const joinSchemaFields = joinTableConf
-                ? { ...readableFields(joinSchema, joinTableConf), ...joinComputedTypes }
-                : { ...joinSchema.fields };
-            // `extraFilters` are only honoured where the engine delegates to the join table's
-            // own `filters()` — buildJoinRefCondition, i.e. the unique:false paths. joinLeft
-            // builds its condition inline (buildLeftJoinClauses) and handles schema and computed
-            // fields only, so advertising extraFilters there would promise a silent no-op.
-            const joinFilterFields = { ...joinSchemaFields, ...(joinTableConf?.extraFilters ?? {}) };
-            const joinRefShape = {
-                filters: Type.Optional(filtersObject(joinFilterFields)),
-                conditions: Type.Optional(Type.Array(conditionItemSchema)),
-            };
-            if (unique) {
-                joinLeftProps[alias] = Type.Object({
-                    filters: Type.Optional(filtersObject(joinSchemaFields)),
-                    conditions: Type.Optional(Type.Array(conditionItemSchema)),
-                    selection: Type.Optional(Type.String()),
-                });
-            }
-            else {
-                joinMustExistProps[alias] = Type.Object(joinRefShape);
-                joinMultipleProps[alias] = Type.Object({
-                    ...joinRefShape,
-                    selection: Type.Optional(Type.String()),
-                });
-                joinGroupProps[alias] = Type.Object({
-                    aggregations: Type.Object({
-                        by: Type.Optional(Type.String()),
-                        distinctCount: Type.Optional(Type.Array(Type.String())),
-                        min: Type.Optional(Type.Array(Type.String())),
-                        max: Type.Optional(Type.Array(Type.String())),
-                        sum: Type.Optional(Type.Array(Type.String())),
-                        avg: Type.Optional(Type.Array(Type.String())),
-                        count: Type.Optional(Type.Array(Type.String())),
-                    }),
-                    filters: Type.Optional(filtersObject(joinFilterFields)),
-                    conditions: Type.Optional(Type.Array(conditionItemSchema)),
-                });
-            }
-        }
-    }
+    const joins = buildJoinBodyProps(dbTables, tableConf, conditionItemSchema);
     const bodyProperties = {
         filters: filtersSchema,
-        conditions: Type.Optional(Type.Array(conditionItemSchema)),
+        conditions: Type.Optional(Type.Array(conditionItemSchema, { maxItems: MAX_CONDITIONS })),
     };
     if (Object.keys(computedTypes).length > 0) {
         bodyProperties.selectComputed = Type.Optional(Type.Array(Type.String()));
     }
-    if (Object.keys(joinMustExistProps).length > 0) {
-        bodyProperties.joinMustExist = Type.Optional(Type.Partial(Type.Object(joinMustExistProps)));
-        bodyProperties.joinMultiple = Type.Optional(Type.Partial(Type.Object(joinMultipleProps)));
-        bodyProperties.joinGroup = Type.Optional(Type.Partial(Type.Object(joinGroupProps)));
+    if (Object.keys(joins.joinMustExist).length > 0) {
+        bodyProperties.joinMustExist = Type.Optional(Type.Partial(Type.Object(joins.joinMustExist)));
+        bodyProperties.joinMultiple = Type.Optional(Type.Partial(Type.Object(joins.joinMultiple)));
+        bodyProperties.joinGroup = Type.Optional(Type.Partial(Type.Object(joins.joinGroup)));
     }
-    if (Object.keys(joinLeftProps).length > 0) {
-        bodyProperties.joinLeft = Type.Optional(Type.Partial(Type.Object(joinLeftProps)));
+    if (Object.keys(joins.joinLeft).length > 0) {
+        bodyProperties.joinLeft = Type.Optional(Type.Partial(Type.Object(joins.joinLeft)));
     }
     return Type.Object(bodyProperties);
 }
@@ -162,7 +171,7 @@ export function SearchTableBodyPost(dbTables, tableName) {
  */
 export function SearchTableQuery(maxItemsPerPage = DEFAULT_MAX_ITEMS_PER_PAGE) {
     return Type.Object({
-        orderBy: Type.Optional(Type.String()),
+        orderBy: Type.Optional(Type.String({ maxLength: MAX_ORDER_BY_LENGTH })),
         page: Type.Optional(Type.Integer({ minimum: 1 })),
         itemsPerPage: Type.Optional(Type.Integer({
             minimum: 1,
@@ -182,42 +191,12 @@ export function SearchTableResponse(dbTables, tableName) {
     const tableConf = dbTables[tableName];
     // Computed fields are present in main rows only when explicitly listed in
     // request body's selectComputed, so they're optional/Partial here.
-    const computedTypes = {};
-    if (tableConf.computedFields) {
-        for (const [name, fn] of Object.entries(tableConf.computedFields)) {
-            try {
-                const stub = fn({
-                    db: { qi: (s) => s, dialectName: 'postgres' },
-                    qiCol: () => '""',
-                });
-                if (stub.type)
-                    computedTypes[name] = stub.type;
-            }
-            catch {
-                // best-effort
-            }
-        }
-    }
+    const computedTypes = computedFieldTypes(tableConf);
     const mainReadable = readableFields(tableConf.Schema, tableConf);
     const mainItem = Object.keys(computedTypes).length > 0
         ? Type.Partial(Type.Object({ ...mainReadable, ...computedTypes }))
         : Type.Partial(Type.Object(mainReadable));
-    const joinMultipleProps = {};
-    const joinLeftProps = {};
-    const joinGroupProps = {};
-    if (tableConf.allowedReadJoins) {
-        for (const joinDef of tableConf.allowedReadJoins) {
-            const { joinSchema, alias, unique } = joinDef;
-            const itemArray = Type.Array(Type.Partial(Type.Object(readableFields(joinSchema, dbTables[joinSchema.tableName]))));
-            if (unique) {
-                joinLeftProps[alias] = itemArray;
-            }
-            else {
-                joinMultipleProps[alias] = itemArray;
-                joinGroupProps[alias] = JoinGroupResultItem;
-            }
-        }
-    }
+    const { joinMultipleProps, joinLeftProps, joinGroupProps } = buildJoinResponseProps(dbTables, tableConf);
     const responseProps = {
         table: Type.String(),
         main: Type.Array(mainItem),

package/dist/lib/sql-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sql-api.d.ts","sourceRoot":"","sources":["../../src/lib/sql-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,OAAO,EAAqB,WAAW,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAU5D,OAAO,KAAK,EACV,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,QAAQ,EAGT,MAAM,aAAa,CAAC;AAIrB,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,2FAA2F;IAC3F,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAID,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,QAAQ,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,GAC/E,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACvD;AAED,qBAAa,MAAM;IAKf,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,OAAO;IALjB,OAAO,CAAC,EAAE,CAAc;gBAGtB,QAAQ,EAAE,WAAW,GAAG,SAAS,EACzB,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,aAAkB;IAgBrC,OAAO,CAAC,YAAY;YAMN,SAAS;IAUjB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,GAAE,kBAAuB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAwB3G,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;IAMzF,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IActG,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAetG,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAM/F,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAa7G,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAKrH;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAEnH"}
+{"version":3,"file":"sql-api.d.ts","sourceRoot":"","sources":["../../src/lib/sql-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,OAAO,EAAqB,WAAW,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAU5D,OAAO,KAAK,EACV,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,eAAe,EACf,SAAS,EACT,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,QAAQ,EAET,MAAM,aAAa,CAAC;AAIrB,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,2FAA2F;IAC3F,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAID,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,QAAQ,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,GAC/E,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACvD;AAED,qBAAa,MAAM;IAKf,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,OAAO;IALjB,OAAO,CAAC,EAAE,CAAc;gBAGtB,QAAQ,EAAE,WAAW,GAAG,SAAS,EACzB,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,aAAkB;IAgBrC,OAAO,CAAC,YAAY;YAMN,SAAS;IAUjB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,GAAE,kBAAuB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAwB3G,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;IAMzF,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IActG,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAetG,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC;IAM/F,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAa7G,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAKrH;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAEnH"}

package/dist/lib/table-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,EAAQ,KAAK,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAsChG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAOX;AAqFD,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAgDD,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAWhB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}
+{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,EAAQ,KAAK,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAsChG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAQX;AAoJD,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAgDD,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAWhB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}

package/dist/lib/table-helpers.js

@@ -50,8 +50,56 @@ export function defineTable(config) {
     validateWriteJoinsUnrestricted(config.allowedWriteJoins);
     validateComputedFields(config);
     validateReadExclude(config);
+    validateTenantScope(config);
     return config;
 }
+/**
+ * `tenantScope` has three forms and they do not mix: `{ column }`, `{ column, through }`, and
+ * `{ anyOf }`. A config naming more than one form is ambiguous rather than additive — an `anyOf`
+ * entry reached through a parent FK would need its own join per entry — and an empty `anyOf`
+ * would fail closed on every row, which looks like a broken deployment rather than a rule.
+ *
+ * Column *names* are not checked against the schema: a tenant column may legitimately be kept
+ * out of the generated schema (see ADR 0009) while still scoping the table.
+ */
+function validateTenantScope(config) {
+    const scope = config.tenantScope;
+    if (!scope)
+        return;
+    const table = config.Schema.tableName;
+    const hasAnyOf = 'anyOf' in scope;
+    const hasColumn = 'column' in scope;
+    if (hasAnyOf && hasColumn) {
+        throw new Error(`defineTable: tenantScope on table '${table}' declares both 'anyOf' and 'column'. ` +
+            `Use one form: 'column' (owner column on this table), 'column' + 'through' (owner ` +
+            `reached via a FK), or 'anyOf' (several owner columns, visible to any of them).`);
+    }
+    if (hasAnyOf && 'through' in scope) {
+        throw new Error(`defineTable: tenantScope on table '${table}' combines 'anyOf' with 'through'. ` +
+            `An 'anyOf' entry reached through a parent is not supported — declare the scope on ` +
+            `the parent table instead.`);
+    }
+    if (hasAnyOf) {
+        const { anyOf } = scope;
+        if (!Array.isArray(anyOf) || !anyOf.length) {
+            throw new Error(`defineTable: tenantScope 'anyOf' on table '${table}' must be a non-empty array of ` +
+                `column names. An empty list would hide every row of the table.`);
+        }
+        if (anyOf.some((c) => typeof c !== 'string' || !c)) {
+            throw new Error(`defineTable: tenantScope 'anyOf' on table '${table}' must contain column names as ` +
+                `non-empty strings.`);
+        }
+        if (new Set(anyOf).size !== anyOf.length) {
+            throw new Error(`defineTable: tenantScope 'anyOf' on table '${table}' repeats a column. ` +
+                `Each owner column must appear once.`);
+        }
+        return;
+    }
+    if (!hasColumn || typeof scope.column !== 'string') {
+        throw new Error(`defineTable: tenantScope on table '${table}' declares neither 'column' nor 'anyOf'. ` +
+            `A scope with no owner column would filter nothing.`);
+    }
+}
 /**
  * `fields` narrows a relation for reading; it has no meaning on a write join and would be
  * actively harmful there. Write paths resolve the secondary's upsert rule by looking the

package/dist/lib/tenant.d.ts

@@ -1,15 +1,62 @@
 import type { FastifyRequest } from 'fastify';
 import type { QueryClient } from './db.js';
 import { ConditionBuilder, type ConditionValue, type ConditionValueOrUndefined } from 'node-condition-builder';
-import type { ITable, SqlApiPluginOptions, TenantId, TenantScope, TenantScopeIndirect, TenantContext } from '../types.js';
+import type { ITable, SqlApiPluginOptions, TenantId, TenantScope, TenantScopeDirect, TenantScopeIndirect, TenantScopeAnyOf, TenantContext } from '../types.js';
 export declare function resolveTenant(options: SqlApiPluginOptions, tableConf: ITable, request: FastifyRequest): Promise<TenantContext | undefined>;
+/**
+ * The read predicate for a scope, as a fragment every caller appends to its own WHERE.
+ *
+ * An `anyOf` scope returns an OR-mode builder — the row is visible when any listed column holds
+ * a tenant id — and every caller appends it, so the group keeps its own parentheses. A NULL
+ * column simply fails to match, which is the wanted behaviour: the other party still decides.
+ */
 export declare function buildTenantCondition(db: QueryClient, scope: TenantScope, tenantIds: TenantId[], ownTable: string): ConditionBuilder;
+/**
+ * Re-target a tenant context onto a related table: the caller's tenant ids paired with that
+ * table's OWN scope. A child table declares its own `tenantScope`, which may differ in shape
+ * from the main table's, so a write to it must be checked against its own column/through-FK.
+ *
+ * Returns undefined for the two cases that must stay unscoped — no tenant context (admin) and
+ * a table that declares no scope — mirroring `appendJoinTenantScope` on the read side.
+ */
+export declare function tenantForTable(tenant: TenantContext | undefined, tableConf: ITable | undefined): TenantContext | undefined;
+/**
+ * Tenant guard as a self-contained boolean fragment, for the positions where the scope cannot
+ * be expressed as an extra INNER JOIN: a child DELETE, a LEFT JOIN's ON clause, and the
+ * correlated subquery of an aggregation. A direct scope compares the table's own column; an
+ * indirect one tests the through table with a correlated EXISTS rather than a join.
+ *
+ * `tableRef` is the name the scoped rows go by in that statement — the table name in a DELETE,
+ * the join alias in an ON clause, the subquery alias inside a correlated SELECT. Returns
+ * undefined without a tenant context (admin) or when the table carries no scope.
+ */
+export declare function buildTenantRowGuard(db: QueryClient, tenant: TenantContext | undefined, tableRef: string): ConditionBuilder | undefined;
 export declare function buildTenantJoin(db: QueryClient, scope: TenantScopeIndirect, mainTableName: string): string;
-export declare function injectTenantValue(record: Record<string, unknown>, scope: TenantScope, tenantIds: TenantId[]): void;
+/**
+ * The insert-side rule for an `anyOf` scope: the payload must anchor the row itself.
+ *
+ * Nothing is auto-injected — with several owner columns the plugin cannot know which party the
+ * caller is meant to be, and guessing would either invent a relationship or refuse a legitimate
+ * one. So the record must name at least one listed column, and at least one of the named ones
+ * must hold a tenant id. The *other* parties are deliberately left alone: a swap request points
+ * at a colleague by definition, and requiring every listed column to match would make the shape
+ * unusable.
+ *
+ * @testonly Exported only so unit tests can exercise it directly.
+ */
+export declare function assertTenantAnchor(record: Record<string, unknown>, scope: TenantScopeAnyOf, tenantIds: TenantId[]): void;
+/** Writes the tenant value into a record according to its scope.
+ * @testonly Exported only so unit tests can exercise it directly.
+ */
+export declare function injectTenantValue(record: Record<string, unknown>, scope: TenantScopeDirect | TenantScopeIndirect, tenantIds: TenantId[]): void;
+/** Checks that an indirect-scope FK really belongs to the tenant.
+ * @testonly Exported only so unit tests can exercise it directly.
+ */
 export declare function validateTenantFK(db: QueryClient, scope: TenantScopeIndirect, tenantIds: TenantId[], fkValues: unknown[]): Promise<void>;
 /**
  * Build WHERE clause for DELETE with tenant filtering.
- * Handles both direct (simple AND) and indirect (subquery via JOIN) scopes.
+ * Handles both direct (simple AND) and indirect (subquery via JOIN) scopes; a tenant whose
+ * addressed table declares no scope yields the plain primary-key clause.
  */
 export declare function buildTenantDeleteWhere(db: QueryClient, tableName: string, pkCol: string, pkValue: ConditionValueOrUndefined | ConditionValue[], tenant: TenantContext): {
     where: string;
@@ -38,8 +85,9 @@ export declare function assertTenantOwnsConflicts(db: QueryClient, tenant: Tenan
  */
 export declare function enforceTenantFKOnUpdate(db: QueryClient, tenant: TenantContext | undefined, updateFields: Record<string, unknown>): Promise<void>;
 /**
- * Mutates `fields` in-place: removes the tenant column from a SET payload (direct scopes only).
- * No-op for indirect or no scope.
+ * Mutates `fields` in-place: removes the tenant columns from a SET payload (scopes whose columns
+ * live on the table itself). An `anyOf` scope drops *every* listed column — neither party can be
+ * reassigned, the same spirit as "a tenant cannot move its own row". No-op for indirect scopes.
  */
 export declare function stripTenantColumn(fields: Record<string, unknown>, scope: TenantScope): void;
 /**
@@ -49,6 +97,19 @@ export declare function stripTenantColumn(fields: Record<string, unknown>, scope
  * Throws 400 (ambiguous tenant) or 403 (mismatch) on violation. No-op when `tenant` is undefined.
  */
 export declare function enforceTenantOnWrites(db: QueryClient, tenant: TenantContext | undefined, records: Record<string, unknown>[]): Promise<void>;
+/**
+ * Columns an UPSERT must leave alone when it lands on an existing row.
+ *
+ * `stripTenantColumn` does this for a plain UPDATE, but an upsert's payload doubles as the
+ * INSERT branch, where the owner columns are exactly what anchors a new row — they cannot simply
+ * be dropped. So they are excluded from the `DO UPDATE SET` instead: state which party you are
+ * to create the row, and that statement is ignored when the row already exists.
+ *
+ * Only `anyOf` scopes need this. A direct scope injects the caller's own tenant, so writing it
+ * back onto a row the conflict guard already proved theirs is a no-op; an indirect one keeps its
+ * owner on another table entirely.
+ */
+export declare function tenantImmutableColumns(tenant: TenantContext | undefined): string[];
 /**
  * For update: builds the optional `extraCondition` ConditionBuilder for direct tenants.
  * Returns undefined for indirect or no-tenant scenarios — those are handled separately

package/dist/lib/tenant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../src/lib/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EACV,MAAM,EACN,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,aAAa,EACd,MAAM,aAAa,CAAC;AAMrB,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CASpC;AAED,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,MAAM,GACf,gBAAgB,CAgBlB;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,MAAM,GACpB,MAAM,CAMR;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAiBN;AAED,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,OAAO,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,GAAG,cAAc,EAAE,EACrD,MAAM,EAAE,aAAa,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAsBtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CA2Df;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,GACjB,IAAI,CAGN;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,GAChC,gBAAgB,GAAG,SAAS,CAM9B;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EACxB,OAAO,EAAE,cAAc,GAAG,cAAc,EAAE,GACzC,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,cAAc,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../src/lib/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EAEV,MAAM,EACN,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACd,MAAM,aAAa,CAAC;AAwCrB,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAWpC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,MAAM,GACf,gBAAgB,CAgBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,aAAa,GAAG,SAAS,CAI3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,QAAQ,EAAE,MAAM,GACf,gBAAgB,GAAG,SAAS,CAoB9B;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,MAAM,GACpB,MAAM,CAMR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAYN;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,iBAAiB,GAAG,mBAAmB,EAC9C,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAiBN;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,OAAO,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,GAAG,cAAc,EAAE,EACrD,MAAM,EAAE,aAAa,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAwBtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CA4Ef;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,GACjB,IAAI,CAGN;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,EAAE,CAGlF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,GAChC,gBAAgB,GAAG,SAAS,CAU9B;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EACxB,OAAO,EAAE,cAAc,GAAG,cAAc,EAAE,GACzC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,cAAc,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAiBf"}