fastify-auto-sqlapi 0.1.4 → 0.1.5

package/AGENTS_BACKEND.md

@@ -184,6 +184,8 @@ await app.register(async (instance) => {
 
 **Note**: After registering the plugin, `app.sqlApi` is available for custom routes — see [SqlApi](#sqlapi--programmatic-high-level-api).
 
+**Note**: Granular route plugins create their own `sqlApi` decorator automatically, so they work standalone (no main plugin required). The decorator is scoped to each route plugin: if you also need `app.sqlApi` in your own routes, register the main plugin.
+
 ---
 
 ## defineTable() — Complete Reference
@@ -234,8 +236,12 @@ export const TableCustomer = defineTable({
   ...exportTableInfo(Schema),             // Schema + auto-filter builder
 
   // OPTIONAL
-  defaultOrder: 'name',                   // ORDER BY default (supports multi: 'name ASC, id DESC')
+  defaultOrder: 'name',                   // ORDER BY default. camelCase fields are mapped to DB
+                                          // columns (e.g. 'squadIndex' -> "squad_index"); supports
+                                          // multi ('name ASC, id DESC'), computed fields, and raw
+                                          // SQL fragments (unknown tokens pass through unchanged)
   excludeFromCreation: ['id'],            // Fields omitted from INSERT — MUST include auto-increment PKs
+  readExclude: ['passwordHash'],          // Fields hidden from ALL reads (writes unaffected)
   distinctResults: true,                  // Use SELECT DISTINCT
 
   // JOINS — relations to other tables. Alias defaults to joinSchema.tableName —
@@ -757,6 +763,7 @@ Tables without `tenantScope` are unaffected — no filtering regardless of `getT
 - **camelCase in API, any case in DB**: all request/response fields are camelCase. The plugin converts via `col()` and `colMap`. For snake_case DB columns (default), conversion is automatic. For camelCase DB columns (e.g. betterauth), the CLI generates a `colMap` that preserves the original column names — no conversion needed. Manual schemas without `colMap` fall back to `toUnderscore()`.
 - **All fields Optional in response**: `RETURNING *` may return any subset. Response schemas use `Type.Partial`.
 - **`excludeFromCreation`**: **IMPORTANT** — auto-increment PKs (e.g. `id` serial/auto_increment) MUST be listed here, otherwise INSERT will try to send them and fail. The CLI auto-detects this and adds it by default. Also useful for `createdAt`/`updatedAt` columns managed by DB defaults or hooks.
+- **`readExclude`**: fields hidden from every read — not projected by search/get, omitted from read response schemas and from this table's default (`*`) join selection when it is a join target. Referencing one from `filters`, `conditions`, `orderBy`, `joinGroup` aggregations or an explicit join `selection` returns 400: hiding a field from output while allowing it to be filtered would leak its value by bisection. **Writes are unaffected** — insert/update/bulk still accept the field, so a column can be writable but never readable (password hash, access token). Primary keys cannot be excluded. Complementary to trimming the Schema, which removes the column from reads *and* writes.
 - **`upsertMap`**: when present for a schema, INSERT becomes upsert. PostgreSQL: `ON CONFLICT (...) DO UPDATE`. MySQL/MariaDB: `ON DUPLICATE KEY UPDATE`. Applies to both main and secondary tables.
 - **`schemaOverrides`**: override auto-generated schema fields with stricter TypeBox types (e.g. `{ email: Type.String({ format: 'email' }) }`). Overrides are merged into the body schema for insert, update, and bulk-upsert. The original Schema file is never modified. In updates, overridden fields are still wrapped in Optional (validates only when present). Overrides appear in Swagger.
 - **Validation receives camelCase**: `validate` receives the original camelCase record (as sent by the client) and secondaries. Field names match the schema definition, with full TypeScript inference (`main.startDate`, not `main.start_date`). It returns `ValidationError[]` — tuples of `[field, code]` or `[field, code, message]`. If any errors are returned, the request is rejected with 400 before hooks or SQL execute.

package/README.md

@@ -143,8 +143,9 @@ const TableCustomer = defineTable({
   ...exportTableInfo(SchemaCustomer),
 
   // Ordering & filtering
-  defaultOrder: 'name',                     // default ORDER BY
+  defaultOrder: 'name',                     // default ORDER BY (camelCase fields map to DB columns)
   excludeFromCreation: ['id'],              // omit from INSERT (e.g. auto-increment)
+  readExclude: ['passwordHash'],            // hide from all reads (writes unaffected)
   distinctResults: true,                    // SELECT DISTINCT
 
   // Relations — alias defaults to joinSchema.tableName. Override with `{ alias: '...' }`
@@ -320,6 +321,21 @@ only columns present in the generated Schema (as narrowed by `schemaOverrides` /
 column — the Schema is the write whitelist. Trim the generated Schema (or use `excludeFromCreation`)
 to keep sensitive columns out of it.
 
+### Read visibility
+
+`readExclude` hides columns from every read while leaving writes untouched — the case for a
+password hash or an access token: writable, never readable.
+
+```typescript
+readExclude: ['accessToken'],
+```
+
+Excluded fields are not selected by search/get, are omitted from read response schemas and from
+the table's default join selection, and cannot be referenced from `filters`, `conditions`,
+`orderBy`, aggregations or an explicit join `selection` (`400`). That last part is the point:
+letting a hidden field be filtered would leak its value by bisection. Primary keys cannot be
+excluded.
+
 ## API Reference
 
 ### POST /search/{table}

package/dist/bin/generate-tables.js

@@ -20,7 +20,7 @@ function printHelp() {
     console.log('  sqlapi-generate-tables --all');
     console.log('');
     display('Table*.ts files are only created if they do not already exist.', CONSOLE_COLORS.magenta);
-    display('dbTables.ts is always regenerated to include all schemas.', CONSOLE_COLORS.magenta);
+    display('dbTables.ts is created if missing, indexing the Table*.ts files present on disk.', CONSOLE_COLORS.magenta);
 }
 await runCli('fastify-auto-sqlapi: generating tables template', async () => {
     const cliArgs = parseArgs({
@@ -84,9 +84,11 @@ await runCli('fastify-auto-sqlapi: generating tables template', async () => {
             }
         }
     }
+    const tableVarOf = (schema) => 'Table' + schema.schemaName.replace(/^Schema/, '');
     // Generate individual Table*.ts files (skip if already exists)
+    const createdTableVars = [];
     for (const schema of targetSchemas) {
-        const tableVarName = 'Table' + schema.schemaName.replace(/^Schema/, '');
+        const tableVarName = tableVarOf(schema);
         const tableFile = path.join(tablesDir, `${tableVarName}.ts`);
         if (fs.existsSync(tableFile)) {
             displayAsTableRow(`${tableVarName}.ts`, 'skipped (already exists)', 60, CONSOLE_COLORS.gray);
@@ -94,17 +96,29 @@ await runCli('fastify-auto-sqlapi: generating tables template', async () => {
         else {
             const content = generateSingleTableFile(schema, allSchemas);
             fs.writeFileSync(tableFile, content);
+            createdTableVars.push(tableVarName);
             displayAsTableRow(`${tableVarName}.ts`, 'created', 60, CONSOLE_COLORS.green);
         }
     }
-    // Generate dbTables.ts only if it does not exist
+    // Generate dbTables.ts only if it does not exist. The index must reference only
+    // Table*.ts files actually present on disk, otherwise a subset run would emit
+    // imports for files that were never generated and the project would not compile.
     const dbTablesFile = path.join(tablesDir, 'dbTables.ts');
     if (fs.existsSync(dbTablesFile)) {
         displayAsTableRow('dbTables.ts', 'skipped (already exists)', 60, CONSOLE_COLORS.gray);
+        const indexContent = fs.readFileSync(dbTablesFile, 'utf-8');
+        const missing = createdTableVars.filter((v) => !indexContent.includes(v));
+        if (missing.length > 0) {
+            display(`Remember to add the new tables to dbTables.ts: ${missing.join(', ')}`, CONSOLE_COLORS.yellow);
+        }
     }
     else {
-        const dbTablesContent = generateDbTablesIndex(allSchemas);
-        fs.writeFileSync(dbTablesFile, dbTablesContent);
+        const existingTableVars = new Set(fs
+            .readdirSync(tablesDir)
+            .filter((f) => f.startsWith('Table') && f.endsWith('.ts'))
+            .map((f) => f.slice(0, -'.ts'.length)));
+        const indexSchemas = allSchemas.filter((s) => existingTableVars.has(tableVarOf(s)));
+        fs.writeFileSync(dbTablesFile, generateDbTablesIndex(indexSchemas));
         displayAsTableRow('dbTables.ts', 'created', 60, CONSOLE_COLORS.green);
     }
     console.log('');

package/dist/lib/cli/tables-codegen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tables-codegen.d.ts","sourceRoot":"","sources":["../../../src/lib/cli/tables-codegen.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAuCpE;AAuCD,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,gBAAgB,EAAE,CAwB3E;AAID,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,CAwHhG;AAID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAqBrE;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CA6FlE"}
+{"version":3,"file":"tables-codegen.d.ts","sourceRoot":"","sources":["../../../src/lib/cli/tables-codegen.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAuCpE;AAuCD,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,gBAAgB,EAAE,CAwB3E;AAID,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,CA2HhG;AAID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAqBrE;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CA6FlE"}

package/dist/lib/cli/tables-codegen.js

@@ -130,10 +130,10 @@ export function generateSingleTableFile(schema, allSchemas) {
     // Imports
     lines.push(`import {defineTable, exportTableInfo, Type} from 'fastify-auto-sqlapi';`);
     lines.push(`import type {ValidationError} from 'fastify-auto-sqlapi';`);
-    lines.push(`import {${schema.schemaName} as Schema} from '../schemas/${schema.schemaName}';`);
+    lines.push(`import {${schema.schemaName} as Schema} from '../schemas/${schema.schemaName}.js';`);
     // Commented imports for related schemas
     for (const relSchema of relatedSchemas) {
-        lines.push(`// import {${relSchema}} from '../schemas/${relSchema}';`);
+        lines.push(`// import {${relSchema}} from '../schemas/${relSchema}.js';`);
     }
     lines.push(``);
     // Extra filters placeholder
@@ -161,6 +161,8 @@ export function generateSingleTableFile(schema, allSchemas) {
     else {
         lines.push(`  // excludeFromCreation: [],`);
     }
+    // Hide columns from every read (writes still accept them, e.g. a password hash)
+    lines.push(`  // readExclude: [],`);
     if (parentRels.length > 0) {
         lines.push(`  // allowedReadJoins: [`);
         for (const rel of parentRels) {
@@ -213,7 +215,7 @@ export function generateDbTablesIndex(schemas) {
     lines.push(``);
     for (const schema of schemas) {
         const tableVarName = 'Table' + schema.schemaName.replace(/^Schema/, '');
-        lines.push(`import {${tableVarName}} from './${tableVarName}';`);
+        lines.push(`import {${tableVarName}} from './${tableVarName}.js';`);
     }
     lines.push(``);
     lines.push(`export const dbTables: DbTables = {`);
@@ -245,7 +247,7 @@ export function generateTablesFile(schemas) {
     lines.push(``);
     // Schema imports
     for (const schema of schemas) {
-        lines.push(`import {${schema.schemaName}} from './${schema.schemaName}';`);
+        lines.push(`import {${schema.schemaName}} from './${schema.schemaName}.js';`);
     }
     // Table definitions
     for (const schema of schemas) {

package/dist/lib/engine/rest/get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/rest/get.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAuB,MAAM,mBAAmB,CAAC;AAEnF,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CA6BrE"}
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/rest/get.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAuB,MAAM,mBAAmB,CAAC;AAEnF,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CA8BrE"}

package/dist/lib/engine/rest/get.js

@@ -2,6 +2,7 @@ import { ConditionBuilder } from 'node-condition-builder';
 import { camelcaseObject } from '../../naming.js';
 import { buildTenantCondition, buildTenantJoin } from '../../tenant.js';
 import { httpError } from '../../errors.js';
+import { readableSelectColumns } from '../../read-access.js';
 import { primaryAsString } from '../../../types.js';
 export async function getEngine(params) {
     const { db, tableConf, id, tenant } = params;
@@ -19,6 +20,7 @@ export async function getEngine(params) {
     const values = cb.getValues();
     const rows = await db.select({
         tableName: tableConf.Schema.tableName,
+        columns: readableSelectColumns(tableConf, tableConf.Schema, db),
         where,
         values,
         limit: '1',

package/dist/lib/engine/search/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/search/search.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,QAAQ,EACR,YAAY,EACZ,YAAY,EAcb,MAAM,mBAAmB,CAAC;AA4jC3B,wBAAsB,YAAY,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,YAAY,CAAC,CA2IvB"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/search/search.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,QAAQ,EACR,YAAY,EACZ,YAAY,EAcb,MAAM,mBAAmB,CAAC;AA+nC3B,wBAAsB,YAAY,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,YAAY,CAAC,CA4IvB"}

package/dist/lib/engine/search/search.js

@@ -1,14 +1,16 @@
 import { ConditionBuilder } from 'node-condition-builder';
 import { camelcaseObject } from '../../naming.js';
 import { buildTenantCondition, buildTenantJoin } from '../../tenant.js';
+import { assertReadable, assertFiltersReadable, readableSelectColumns } from '../../read-access.js';
 import { primaryAsString } from '../../../types.js';
 // ─── Schema field validation ────────────────────────────────
-function validateSchemaField(field, schema) {
+function validateSchemaField(field, schema, tableConf) {
     if (!(field in schema.fields)) {
         const err = new Error(`Unknown field: ${field}`);
         err.statusCode = 400;
         throw err;
     }
+    assertReadable(tableConf, field);
     return schema.col(field);
 }
 function err400(msg) {
@@ -37,6 +39,7 @@ function buildComputedContext(db, schema, alias) {
 }
 function resolveFieldRef(field, schema, tableConf, db, alias) {
     if (field in schema.fields) {
+        assertReadable(tableConf, field);
         const col = db.qi(schema.col(field));
         const expr = alias ? `${db.qi(alias)}.${col}` : col;
         return { expr, values: [], computed: false };
@@ -121,11 +124,19 @@ function mapRowsToCamelCase(rows, schema, computedFieldNames) {
         return camel;
     });
 }
-/** Build the SELECT columns list for a join fetch: '*' or comma-separated quoted columns. */
-function buildSelectionColumns(selection, joinSchema, db) {
-    if (selection === '*')
-        return '*';
-    return selection.split(',').map((c) => db.qi(joinSchema.col(c.trim()))).join(', ');
+/**
+ * Build the SELECT columns list for a join fetch: '*' or comma-separated quoted columns.
+ * A default '*' selection narrows to the join table's readable columns when it declares
+ * `readExclude`; an explicit selection naming an excluded field is rejected with 400.
+ */
+function buildSelectionColumns(selection, joinSchema, db, joinTableConf) {
+    if (selection === '*') {
+        return readableSelectColumns(joinTableConf, joinSchema, db) ?? '*';
+    }
+    return selection
+        .split(',')
+        .map((c) => db.qi(validateSchemaField(c.trim(), joinSchema, joinTableConf)))
+        .join(', ');
 }
 const AGG_FN = {
     sum: { sql: 'SUM', distinct: false },
@@ -219,7 +230,7 @@ function validateOrderBy(orderBy, tableConf, db, dbTables, joinGroup, startIdx)
         if (dotted2) {
             const [, alias, field, dir] = dotted2;
             const joinDef = requireJoin(tableConf, alias, true);
-            const col = validateSchemaField(field, joinDef.joinSchema);
+            const col = validateSchemaField(field, joinDef.joinSchema, dbTables[joinDef.joinSchema.tableName]);
             // Reference the LEFT JOIN'd table via its alias (SQL identifier).
             outParts.push(`${db.qi(alias)}.${db.qi(col)} ${(dir || 'ASC').toUpperCase()}`);
             leftJoinAliases.add(alias);
@@ -259,6 +270,7 @@ function buildLeftJoinClauses(db, dbTables, tableConf, aliasesNeedingJoin, joinL
             const cb = new ConditionBuilder('AND', db.cbDialect);
             const joinTableConf = dbTables[joinSchema.tableName];
             const computed = joinTableConf?.computedFields;
+            assertFiltersReadable(ref.filters, joinTableConf);
             if (ref.filters) {
                 for (const [field, value] of Object.entries(ref.filters)) {
                     if (value === null || value === undefined)
@@ -279,6 +291,7 @@ function buildLeftJoinClauses(db, dbTables, tableConf, aliasesNeedingJoin, joinL
                         err400(`Invalid condition method: ${c.method}`);
                     }
                     if (c.field in joinSchema.fields) {
+                        assertReadable(dbTables[joinSchema.tableName], c.field);
                         const col = `${aliasIdent}.${db.qi(joinSchema.col(c.field))}`;
                         dispatchConditionMethod(cb, c.method, col, c.params ?? []);
                     }
@@ -303,19 +316,52 @@ function buildLeftJoinClauses(db, dbTables, tableConf, aliasesNeedingJoin, joinL
     return { joinClauses, whereExtras, values };
 }
 // ─── Main query execution ───────────────────────────────────
+/**
+ * Converts a configured order (`defaultOrder` or the primary-key fallback) to SQL.
+ * Unlike the request `orderBy` (strictly validated by `validateOrderBy`), this is
+ * lenient for backward compatibility: tokens matching a camelCase schema field are
+ * mapped to their quoted DB column, computed fields (without bound values) expand
+ * to their expression, and anything else passes through unchanged as raw SQL.
+ */
+function convertConfiguredOrder(order, tableConf, db) {
+    return order
+        .split(',')
+        .map((part) => {
+        const trimmed = part.trim();
+        const match = trimmed.match(/^(\w+)(?:\s+(ASC|DESC))?$/i);
+        if (match) {
+            const [, field, dir] = match;
+            const suffix = dir ? ` ${dir.toUpperCase()}` : '';
+            if (field in tableConf.Schema.fields) {
+                return `${db.qi(tableConf.Schema.col(field))}${suffix}`;
+            }
+            const computed = tableConf.computedFields?.[field];
+            if (computed) {
+                const ev = evaluateComputedField(computed, tableConf.Schema, db, undefined, `Computed field '${field}' with bound values cannot be used in defaultOrder`);
+                return `${ev.expr}${suffix}`;
+            }
+        }
+        return trimmed;
+    })
+        .join(', ');
+}
 async function executeMainQuery(db, tableConf, where, values, orderBy, paginator, extraJoins = [], selectComputed, maxRows) {
     const tableName = tableConf.Schema.tableName;
-    const order = orderBy || tableConf.defaultOrder || primaryAsString(tableConf.primary);
+    // Request orderBy arrives already validated and mapped by validateOrderBy;
+    // configured fallbacks (defaultOrder / primary key) are converted leniently here.
+    const order = orderBy || convertConfiguredOrder(tableConf.defaultOrder || primaryAsString(tableConf.primary), tableConf, db);
     // With a paginator, the page size governs the LIMIT. Without one, apply `maxRows` (if set) so an
     // unbounded search cannot dump the whole table; a plain integer is a safe, non-injectable LIMIT.
     const limit = paginator
         ? `${paginator.itemsPerPage} OFFSET ${(paginator.page - 1) * paginator.itemsPerPage}`
         : (maxRows != null ? String(maxRows) : null);
+    // Base projection: '*' unless the table hides fields via readExclude.
+    const readableColumns = readableSelectColumns(tableConf, tableConf.Schema, db);
     // Optional computed projections — bound values, if any, are NOT yet supported
     // here (would require placeholder-aware composition with WHERE values).
-    let columns;
+    let columns = readableColumns;
     if (selectComputed?.length) {
-        const projections = ['*'];
+        const projections = [readableColumns ?? '*'];
         for (const name of selectComputed) {
             const fn = tableConf.computedFields?.[name];
             if (!fn)
@@ -391,7 +437,7 @@ async function executeJoinMultiple(db, dbTables, tableConf, mainResults, joinMul
             ({ where, values } = appendComputedConditions(where, values, computedClauses, db));
         }
         const selection = ref?.selection ?? defaultSelection;
-        const columns = buildSelectionColumns(selection, joinSchema, db);
+        const columns = buildSelectionColumns(selection, joinSchema, db, joinTableConf);
         const rows = await db.select({
             tableName: joinSchema.tableName,
             columns,
@@ -425,7 +471,7 @@ async function executeJoinLeft(db, dbTables, tableConf, mainResults, joinLeft, t
         const where = cb.build(1, db.ph);
         const values = cb.getValues();
         const selection = ref?.selection ?? defaultSelection;
-        const columns = buildSelectionColumns(selection, joinSchema, db);
+        const columns = buildSelectionColumns(selection, joinSchema, db, joinTableConf);
         const rows = await db.select({
             tableName: joinSchema.tableName,
             columns,
@@ -482,7 +528,7 @@ async function executeJoinGroup(db, dbTables, tableConf, mainResults, joinGroup,
                 return;
             const fn = AGG_FN[kind];
             for (const f of fields) {
-                const col = validateSchemaField(f, joinSchema);
+                const col = validateSchemaField(f, joinSchema, joinTableConf);
                 selectParts.push(`${aggExpr(fn, db.qi(col))} as "${kind}_${f}"`);
             }
         };
@@ -568,6 +614,7 @@ function dispatchConditionMethod(cb, method, colOrExpr, params) {
     }
 }
 function buildJoinRefCondition(joinTableConf, joinSchema, ref, db) {
+    assertFiltersReadable(ref.filters, joinTableConf);
     const cb = (ref.filters && joinTableConf)
         ? joinTableConf.filters(ref.filters, db.cbDialect)
         : new ConditionBuilder('AND', db.cbDialect);
@@ -581,7 +628,7 @@ function buildJoinRefCondition(joinTableConf, joinSchema, ref, db) {
             // for an LHS expression.
             if (joinTableConf?.computedFields?.[c.field])
                 continue;
-            const col = db.qi(validateSchemaField(c.field, joinSchema));
+            const col = db.qi(validateSchemaField(c.field, joinSchema, joinTableConf));
             dispatchConditionMethod(cb, c.method, col, c.params ?? []);
         }
     }
@@ -778,6 +825,7 @@ export async function searchEngine(dbTables, params) {
         for (const a of Object.keys(joinLeft))
             requireJoin(tableConf, a, true);
     // Build main condition
+    assertFiltersReadable(filters, tableConf);
     const condition = tableConf.filters(filters || {}, db.cbDialect);
     // Filters that target computed fields (declared on tableConf.computedFields)
     // are applied via the side-channel pattern further down.

package/dist/lib/read-access.d.ts

@@ -0,0 +1,31 @@
+import type { QueryClient } from './db.js';
+import type { ITable, SchemaDefinition } from '../types.js';
+/**
+ * Read visibility (`ITable.readExclude`).
+ *
+ * Excluded fields are never projected by any read query and cannot be referenced
+ * from filters, conditions, orderBy, aggregations or join selections: allowing a
+ * field to be filtered while hiding it from the output would still leak its value
+ * by bisection. Write paths (insert/update/upsert) are deliberately unaffected —
+ * a field can be writable but never readable (e.g. a password hash).
+ */
+export declare function isReadExcluded(tableConf: ITable | undefined, field: string): boolean;
+/** Throws 400 when `field` is read-excluded on `tableConf`. */
+export declare function assertReadable(tableConf: ITable | undefined, field: string): void;
+/**
+ * Throws 400 when a filter map targets a read-excluded field. Keys that are not
+ * excluded pass through untouched (extraFilters and computed names included).
+ */
+export declare function assertFiltersReadable(filters: Record<string, unknown> | undefined, tableConf: ITable | undefined): void;
+/** Schema field names that may be read, in schema declaration order. */
+export declare function readableFieldNames(tableConf: ITable | undefined, schema: SchemaDefinition): string[];
+/**
+ * SELECT column list for a table with read exclusions, or `undefined` when the
+ * table has none (callers keep their existing `*` projection).
+ *
+ * Columns are qualified with the table name: read queries may carry a tenant
+ * `through` INNER JOIN, where a bare column name shared with the through table
+ * would be ambiguous.
+ */
+export declare function readableSelectColumns(tableConf: ITable | undefined, schema: SchemaDefinition, db: QueryClient): string | undefined;
+//# sourceMappingURL=read-access.d.ts.map

package/dist/lib/read-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-access.d.ts","sourceRoot":"","sources":["../../src/lib/read-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG5D;;;;;;;;GAQG;AAEH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEpF;AAED,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIjF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC5C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,IAAI,CAKN;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,gBAAgB,GACvB,MAAM,EAAE,CAIV;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,WAAW,GACd,MAAM,GAAG,SAAS,CAMpB"}

package/dist/lib/read-access.js

@@ -0,0 +1,53 @@
+import { httpError } from './errors.js';
+/**
+ * Read visibility (`ITable.readExclude`).
+ *
+ * Excluded fields are never projected by any read query and cannot be referenced
+ * from filters, conditions, orderBy, aggregations or join selections: allowing a
+ * field to be filtered while hiding it from the output would still leak its value
+ * by bisection. Write paths (insert/update/upsert) are deliberately unaffected —
+ * a field can be writable but never readable (e.g. a password hash).
+ */
+export function isReadExcluded(tableConf, field) {
+    return tableConf?.readExclude?.includes(field) ?? false;
+}
+/** Throws 400 when `field` is read-excluded on `tableConf`. */
+export function assertReadable(tableConf, field) {
+    if (isReadExcluded(tableConf, field)) {
+        throw httpError(400, `Field is not readable: ${field}`);
+    }
+}
+/**
+ * Throws 400 when a filter map targets a read-excluded field. Keys that are not
+ * excluded pass through untouched (extraFilters and computed names included).
+ */
+export function assertFiltersReadable(filters, tableConf) {
+    if (!filters || !tableConf?.readExclude?.length)
+        return;
+    for (const key of Object.keys(filters)) {
+        assertReadable(tableConf, key);
+    }
+}
+/** Schema field names that may be read, in schema declaration order. */
+export function readableFieldNames(tableConf, schema) {
+    const fields = Object.keys(schema.fields);
+    if (!tableConf?.readExclude?.length)
+        return fields;
+    return fields.filter((f) => !isReadExcluded(tableConf, f));
+}
+/**
+ * SELECT column list for a table with read exclusions, or `undefined` when the
+ * table has none (callers keep their existing `*` projection).
+ *
+ * Columns are qualified with the table name: read queries may carry a tenant
+ * `through` INNER JOIN, where a bare column name shared with the through table
+ * would be ambiguous.
+ */
+export function readableSelectColumns(tableConf, schema, db) {
+    if (!tableConf?.readExclude?.length)
+        return undefined;
+    const table = db.qi(schema.tableName);
+    return readableFieldNames(tableConf, schema)
+        .map((f) => `${table}.${db.qi(schema.col(f))}`)
+        .join(', ');
+}

package/dist/lib/schema/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/lib/schema/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAErE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAY/C,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAuHlF;AAED,eAAO,MAAM,sBAAsB;;;;;;;;EASjC,CAAC;AAEH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAmElF"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/lib/schema/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAGrE,OAAO,KAAK,EAAE,QAAQ,EAA4B,MAAM,gBAAgB,CAAC;AAyBzE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAuHlF;AAED,eAAO,MAAM,sBAAsB;;;;;;;;EASjC,CAAC;AAEH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAsElF"}

package/dist/lib/schema/search.js

@@ -1,5 +1,16 @@
 import { Type } from '@sinclair/typebox';
 import { ALLOWED_METHODS } from '../condition-methods.js';
+import { readableFieldNames } from '../read-access.js';
+/** Schema fields minus the ones hidden by `readExclude`. */
+function readableFields(schema, tableConf) {
+    if (!tableConf?.readExclude?.length)
+        return { ...schema.fields };
+    const out = {};
+    for (const field of readableFieldNames(tableConf, schema)) {
+        out[field] = schema.fields[field];
+    }
+    return out;
+}
 const JoinGroupResultItem = Type.Object({
     sum: Type.Optional(Type.Record(Type.String(), Type.Any())),
     min: Type.Optional(Type.Record(Type.String(), Type.Any())),
@@ -38,7 +49,7 @@ export function SearchTableBodyPost(dbTables, tableName) {
         }
     }
     const filterFields = {
-        ...schema.fields,
+        ...readableFields(schema, tableConf),
         ...tableConf.extraFilters,
         ...computedTypes,
     };
@@ -71,7 +82,7 @@ export function SearchTableBodyPost(dbTables, tableName) {
                 }
             }
             const joinFilterFields = joinTableConf
-                ? { ...joinSchema.fields, ...joinTableConf.extraFilters, ...joinComputedTypes }
+                ? { ...readableFields(joinSchema, joinTableConf), ...joinTableConf.extraFilters, ...joinComputedTypes }
                 : { ...joinSchema.fields };
             const joinRefShape = {
                 filters: Type.Optional(Type.Partial(Type.Object(joinFilterFields))),
@@ -150,16 +161,17 @@ export function SearchTableResponse(dbTables, tableName) {
             }
         }
     }
+    const mainReadable = readableFields(tableConf.Schema, tableConf);
     const mainItem = Object.keys(computedTypes).length > 0
-        ? Type.Partial(Type.Object({ ...tableConf.Schema.fields, ...computedTypes }))
-        : Type.Partial(Type.Object(tableConf.Schema.fields));
+        ? Type.Partial(Type.Object({ ...mainReadable, ...computedTypes }))
+        : Type.Partial(Type.Object(mainReadable));
     const joinMultipleProps = {};
     const joinLeftProps = {};
     const joinGroupProps = {};
     if (tableConf.allowedReadJoins) {
         for (const joinDef of tableConf.allowedReadJoins) {
             const { joinSchema, alias, unique } = joinDef;
-            const itemArray = Type.Array(Type.Partial(Type.Object(joinSchema.fields)));
+            const itemArray = Type.Array(Type.Partial(Type.Object(readableFields(joinSchema, dbTables[joinSchema.tableName]))));
             if (unique) {
                 joinLeftProps[alias] = itemArray;
             }

package/dist/lib/sql-api-decorator.d.ts

@@ -0,0 +1,18 @@
+import type { FastifyInstance } from 'fastify';
+import { type SqlApi } from './sql-api.js';
+import type { SqlApiPluginOptions } from '../types.js';
+declare module 'fastify' {
+    interface FastifyInstance {
+        sqlApi: SqlApi;
+    }
+}
+/**
+ * Decorates `fastify.sqlApi` (lazy getter) on the given instance unless the
+ * decorator is already present in scope. The main plugin calls this at the
+ * fp level (parent scope); granular route plugins call it through
+ * `registerForAllTables` so they also work standalone, each within its own
+ * encapsulation context. The underlying pool (`fastify.pg` / `fastify.mysql`)
+ * is shared either way.
+ */
+export declare function ensureSqlApiDecorator(fastify: FastifyInstance, options: SqlApiPluginOptions): void;
+//# sourceMappingURL=sql-api-decorator.d.ts.map

package/dist/lib/sql-api-decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-api-decorator.d.ts","sourceRoot":"","sources":["../../src/lib/sql-api-decorator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CA2BN"}

package/dist/lib/sql-api-decorator.js

@@ -0,0 +1,40 @@
+import { createQueryClient } from './db.js';
+import { pgQueryable } from './adapters/pg-adapter.js';
+import { mysqlQueryable } from './adapters/mysql-adapter.js';
+import { createSqlApi } from './sql-api.js';
+/**
+ * Decorates `fastify.sqlApi` (lazy getter) on the given instance unless the
+ * decorator is already present in scope. The main plugin calls this at the
+ * fp level (parent scope); granular route plugins call it through
+ * `registerForAllTables` so they also work standalone, each within its own
+ * encapsulation context. The underlying pool (`fastify.pg` / `fastify.mysql`)
+ * is shared either way.
+ */
+export function ensureSqlApiDecorator(fastify, options) {
+    if (fastify.hasDecorator('sqlApi'))
+        return;
+    // Lazy-init QueryClient (internal closure — not decorated on fastify)
+    let cachedDb;
+    function getDb() {
+        if (!cachedDb) {
+            const pool = (options.dialect === 'mysql' || options.dialect === 'mariadb')
+                ? mysqlQueryable(fastify.mysql)
+                : pgQueryable(fastify.pg);
+            cachedDb = createQueryClient(pool, options.dialect);
+            if (options.debug)
+                cachedDb.setDebug(true);
+        }
+        return cachedDb;
+    }
+    let cachedSqlApi;
+    fastify.decorate('sqlApi', {
+        getter() {
+            if (!cachedSqlApi) {
+                cachedSqlApi = createSqlApi(getDb(), options.DbTables, {
+                    getTenantId: options.getTenantId,
+                });
+            }
+            return cachedSqlApi;
+        },
+    });
+}

package/dist/lib/table-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA0BhG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAKX;AA2CD,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAShB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}
+{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA0BhG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAMX;AAkED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAShB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}

package/dist/lib/table-helpers.js

@@ -33,8 +33,26 @@ export function defineTable(config) {
     validateAliasUniqueness(config.allowedReadJoins, 'allowedReadJoins');
     validateAliasUniqueness(config.allowedWriteJoins, 'allowedWriteJoins');
     validateComputedFields(config);
+    validateReadExclude(config);
     return config;
 }
+function validateReadExclude(config) {
+    const excluded = config.readExclude;
+    if (!excluded?.length)
+        return;
+    const schemaFields = Object.keys(config.Schema.fields);
+    const pkFields = Array.isArray(config.primary) ? config.primary : [config.primary];
+    for (const field of excluded) {
+        if (!schemaFields.includes(field)) {
+            throw new Error(`defineTable: readExclude field '${field}' is not a schema field on ` +
+                `table '${config.Schema.tableName}'.`);
+        }
+        if (pkFields.includes(field)) {
+            throw new Error(`defineTable: readExclude cannot hide the primary key field '${field}' on ` +
+                `table '${config.Schema.tableName}' — reads and joins rely on it.`);
+        }
+    }
+}
 function validateComputedFields(config) {
     const computed = config.computedFields;
     if (!computed)

package/dist/routes/auto/plugin.d.ts

@@ -1,11 +1,5 @@
 import type { FastifyInstance } from 'fastify';
-import { type SqlApi } from '../../lib/sql-api.js';
 import type { SqlApiPluginOptions } from '../../types.js';
-declare module 'fastify' {
-    interface FastifyInstance {
-        sqlApi: SqlApi;
-    }
-}
 declare const _default: (fastify: FastifyInstance, options: SqlApiPluginOptions) => Promise<void>;
 export default _default;
 //# sourceMappingURL=plugin.d.ts.map

package/dist/routes/auto/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAO7D,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AASjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB;CACF;kCAuDU,eAAe,WACf,mBAAmB,KAC3B,OAAO,CAAC,IAAI,CAAC;AAHhB,wBAiFoC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAa7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;kCAuD/C,eAAe,WACf,mBAAmB,KAC3B,OAAO,CAAC,IAAI,CAAC;AAHhB,wBA0DoC"}

package/dist/routes/auto/plugin.js

@@ -1,10 +1,7 @@
 import fp from 'fastify-plugin';
 import { ConditionBuilder } from 'node-condition-builder';
 import { getDialect } from '../../lib/dialect.js';
-import { createQueryClient } from '../../lib/db.js';
-import { pgQueryable } from '../../lib/adapters/pg-adapter.js';
-import { mysqlQueryable } from '../../lib/adapters/mysql-adapter.js';
-import { createSqlApi } from '../../lib/sql-api.js';
+import { ensureSqlApiDecorator } from '../../lib/sql-api-decorator.js';
 import { setupSwagger } from '../../lib/setup-swagger.js';
 import searchRoutes from './search.routes.js';
 import getRoutes from './get.routes.js';
@@ -56,31 +53,8 @@ export default fp(async function fastifyAutoSqlApi(fastify, options) {
     // Set ConditionBuilder dialect globally
     const dialect = getDialect(options.dialect || 'postgres');
     ConditionBuilder.DIALECT = dialect.cbDialect;
-    // Lazy-init QueryClient (internal closure — not decorated on fastify)
-    let cachedDb;
-    function getDb() {
-        if (!cachedDb) {
-            const pool = (options.dialect === 'mysql' || options.dialect === 'mariadb')
-                ? mysqlQueryable(fastify.mysql)
-                : pgQueryable(fastify.pg);
-            cachedDb = createQueryClient(pool, options.dialect);
-            if (options.debug)
-                cachedDb.setDebug(true);
-        }
-        return cachedDb;
-    }
     // SqlApi: exposed to parent scope via fp
-    let cachedSqlApi;
-    fastify.decorate('sqlApi', {
-        getter() {
-            if (!cachedSqlApi) {
-                cachedSqlApi = createSqlApi(getDb(), options.DbTables, {
-                    getTenantId: options.getTenantId,
-                });
-            }
-            return cachedSqlApi;
-        },
-    });
+    ensureSqlApiDecorator(fastify, options);
     // Routes in a child scope — prefix applies here, not at fp level
     const { prefix, ...routeOptions } = options;
     await fastify.register(async (instance) => {

package/dist/routes/auto/route-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/route-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE5F,KAAK,WAAW,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;AAElG,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAE9F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQlG;AAED,UAAU,WAAW;IAEnB,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX,MAAM,CAAC,EAAE,GAAG,CAAC;IAEb,WAAW,CAAC,EAAE,GAAG,CAAC;IAElB,QAAQ,CAAC,EAAE,GAAG,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,iGAAiG;IACjG,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1C,gFAAgF;IAChF,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,aAAa,EAAE,GAAG,GAAG,GAAG,CAAC;IACzB,wIAAwI;IACxI,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,WAAW,CAAC;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC;IACpF;2EACuE;IACvE,MAAM,EAAE,CACN,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAiCf"}
+{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/route-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE5F,KAAK,WAAW,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;AAElG,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAE9F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQlG;AAED,UAAU,WAAW;IAEnB,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX,MAAM,CAAC,EAAE,GAAG,CAAC;IAEb,WAAW,CAAC,EAAE,GAAG,CAAC;IAElB,QAAQ,CAAC,EAAE,GAAG,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,iGAAiG;IACjG,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1C,gFAAgF;IAChF,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,aAAa,EAAE,GAAG,GAAG,GAAG,CAAC;IACzB,wIAAwI;IACxI,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,WAAW,CAAC;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC;IACpF;2EACuE;IACvE,MAAM,EAAE,CACN,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAqCf"}

package/dist/routes/auto/route-helpers.js

@@ -1,3 +1,4 @@
+import { ensureSqlApiDecorator } from '../../lib/sql-api-decorator.js';
 export function mergeOnRequests(options, tableConf) {
     return [...(options.onRequests || []), ...(tableConf.onRequests || [])];
 }
@@ -16,6 +17,9 @@ export function buildWriteDescription(action, tableName, tableConf) {
  * default reply when handler returns a value.
  */
 export async function registerForAllTables(fastify, options, spec) {
+    // Granular composition support: when a route plugin is registered without the
+    // main plugin, no ancestor has decorated `sqlApi` — create it in this scope.
+    ensureSqlApiDecorator(fastify, options);
     const { DbTables } = options;
     for (const [tableName, tableConf] of Object.entries(DbTables)) {
         // operations acts as a whitelist; when omitted every operation is exposed.

package/dist/types/table.d.ts

@@ -102,6 +102,19 @@ export interface ITable<F extends Record<string, TSchema> = Record<string, TSche
      * affected.
      */
     operations?: TableOperation[];
+    /**
+     * Fields hidden from every read: they are not projected by search/get, not included
+     * in the read response schemas, and omitted from this table's default join selection
+     * when it is the target of a join.
+     *
+     * Referencing an excluded field from filters, conditions, orderBy, aggregations or an
+     * explicit join selection is rejected with 400 — hiding a field from the output while
+     * letting it be filtered would still leak its value by bisection.
+     *
+     * Write paths are NOT affected: a field can be writable but never readable (e.g. a
+     * password hash). Primary-key fields cannot be excluded.
+     */
+    readExclude?: (string & keyof F)[];
     defaultOrder?: string;
     excludeFromCreation?: (string & keyof F)[];
     distinctResults?: boolean;

package/dist/types/table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/types/table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,WAAW,IAAI,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEpE,4FAA4F;AAC5F,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,YAAY,CAAC;AAEjB,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;AACrE,MAAM,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC;AAC/F;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,SAAS,KAAK,gBAAgB,CAAC;AAE7F,MAAM,WAAW,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjF,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACjD,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,YAAY,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClC,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,KAC1D,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,EAC7D,sBAAsB,CAAC,EAAE,OAAO,KAC7B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAAE,EACzC,gBAAgB,CAAC,EAAE,OAAO,KACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,EAC7D,gBAAgB,CAAC,EAAE,OAAO,EAC1B,eAAe,CAAC,EAAE,OAAO,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,GAAG,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,GAAG,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,CACjB,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAC5B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IAC3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC;IAChG,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAGD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAGnD,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAE7D;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAEpG"}
+{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/types/table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,WAAW,IAAI,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEpE,4FAA4F;AAC5F,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,YAAY,CAAC;AAEjB,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;AACrE,MAAM,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC;AAC/F;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,SAAS,KAAK,gBAAgB,CAAC;AAE7F,MAAM,WAAW,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjF,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACjD,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,YAAY,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClC,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,KAC1D,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,EAC7D,sBAAsB,CAAC,EAAE,OAAO,KAC7B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAAE,EACzC,gBAAgB,CAAC,EAAE,OAAO,KACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,EAC7D,gBAAgB,CAAC,EAAE,OAAO,EAC1B,eAAe,CAAC,EAAE,OAAO,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,GAAG,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,GAAG,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,CACjB,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAC5B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IAC3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC;IAChG,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAGD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAGnD,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAE7D;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAEpG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fastify-auto-sqlapi",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Fastify plugin for automatic CRUD API generation from PostgreSQL, MySQL and MariaDB tables",
   "type": "module",
   "main": "./dist/index.js",