fastify-auto-sqlapi 0.1.4 → 0.1.6

package/AGENTS_BACKEND.md

@@ -184,6 +184,8 @@ await app.register(async (instance) => {
 
 **Note**: After registering the plugin, `app.sqlApi` is available for custom routes — see [SqlApi](#sqlapi--programmatic-high-level-api).
 
+**Note**: Granular route plugins create their own `sqlApi` decorator automatically, so they work standalone (no main plugin required). The decorator is scoped to each route plugin: if you also need `app.sqlApi` in your own routes, register the main plugin.
+
 ---
 
 ## defineTable() — Complete Reference
@@ -234,8 +236,12 @@ export const TableCustomer = defineTable({
   ...exportTableInfo(Schema),             // Schema + auto-filter builder
 
   // OPTIONAL
-  defaultOrder: 'name',                   // ORDER BY default (supports multi: 'name ASC, id DESC')
+  defaultOrder: 'name',                   // ORDER BY default. camelCase fields are mapped to DB
+                                          // columns (e.g. 'squadIndex' -> "squad_index"); supports
+                                          // multi ('name ASC, id DESC'), computed fields, and raw
+                                          // SQL fragments (unknown tokens pass through unchanged)
   excludeFromCreation: ['id'],            // Fields omitted from INSERT — MUST include auto-increment PKs
+  readExclude: ['passwordHash'],          // Fields hidden from ALL reads (writes unaffected)
   distinctResults: true,                  // Use SELECT DISTINCT
 
   // JOINS — relations to other tables. Alias defaults to joinSchema.tableName —
@@ -479,12 +485,22 @@ type ComputedFieldFn = (ctx: {
   db: QueryClient;                                 // dialect-aware (qi, ph, dialectName, dateTrunc, ...)
   qiCol(field: string, opts?: { qualifier?: string }): string;
 }) => {
-  expr: string;                                    // SQL fragment
-  values: unknown[];                               // bound values (see limitations below)
+  expr: string;                                    // SQL fragment; mark each bound value with `?`
+  values: unknown[];                               // one entry per `?` marker in expr
   type: TSchema;                                   // REQUIRED — used by Swagger and body validation
 };
 ```
 
+**Bound values use `?` markers.** The engine assigns the placeholder positions — never write `$1` or `db.ph(n)` yourself. Use `\?` for a literal question mark (PostgreSQL jsonb operator). A computed whose marker count does not match `values.length` is rejected with a descriptive error, because it would bind values the query never references:
+
+```typescript
+bonus: ({ qiCol }) => ({
+  expr: `CASE WHEN ${qiCol('role')} = ? THEN ${qiCol('salary')} ELSE 0 END`,
+  values: ['admin'],
+  type: Type.Number(),
+}),
+```
+
 `qiCol(field)` returns a properly-quoted column reference, optionally prefixed by an alias qualifier — the engine passes the alias automatically when the computed is invoked inside a `joinLeft` LEFT JOIN, so the same function works both inline on the main query and as a parent-side column.
 
 ### Validation & startup checks
@@ -499,8 +515,9 @@ For `joinLeft` specifically, the computed expr is automatically alias-prefixed b
 
 ### Limitations (first round, by design)
 
-- **Bound `values` in computed expressions** are supported only on `filters`/`conditions` (main and `joinMustExist`/`joinMultiple`/`joinGroup`). They are rejected with 400 on `selectComputed`, `computeMin/Max/Sum/Avg`, `orderBy`, and `joinLeft.filters`/`conditions` — those paths require placeholder coordination not done in the first round. Most use cases (JSON extraction, concat, dateTrunc, simple ops) need no placeholders.
-- **Computed CAN be used in `joinGroup.aggregations.by`** (just pass the computed name as a string). Bound `values` are not supported in this position (rejected with 400). The existing FK-correlation rule for `orderBy <alias>.<fn>.<field>` still applies: 3-parti aggregation orderBy on a `by` that isn't the correlation FK is rejected — by definition a computed-by produces multiple groups per main row, so this is never valid.
+- **Bound `values` in computed expressions** work anywhere the expression lands in the `WHERE` clause or in `ORDER BY`: `filters` and `conditions` (main, `joinMustExist`, `joinMultiple`, `joinGroup`, `joinLeft`) and `orderBy`. The ConditionBuilder assigns the placeholder positions there, so no coordination is needed from the caller.
+- They are still rejected with 400 on `selectComputed`, `computeMin/Max/Sum/Avg`, `joinGroup.aggregations.by` and `defaultOrder`. Those expressions are emitted in the `SELECT` / `GROUP BY` list, which precedes the `WHERE` values in the parameter order — there is no correct position for them there. Most use cases (JSON extraction, concat, dateTrunc, simple ops) need no bound values at all.
+- **Computed CAN be used in `joinGroup.aggregations.by`** (just pass the computed name as a string). Bound `values` are not supported in this position (rejected with 400 — it is emitted in the `SELECT`/`GROUP BY` list). The existing FK-correlation rule for `orderBy <alias>.<fn>.<field>` still applies: 3-parti aggregation orderBy on a `by` that isn't the correlation FK is rejected — by definition a computed-by produces multiple groups per main row, so this is never valid.
 - **Computed cannot be used as aggregation function** (`sum`/`min`/`max`/...). The values inside `aggregations.sum: ['<name>']` must be schema field names. To aggregate on a derived expression, declare the derivation as a computed and pass the computed name as the field, BUT only via `computeMin/Max/Sum/Avg` (top-level main aggregates), not the joinGroup ones.
 - **No chained computed** (a computed referencing another computed). Flat-only.
 - **Read-only**. Computed fields are not usable in insert/update bodies — the consumer's `expr` is for SELECT/WHERE/ORDER BY, never for writes.
@@ -757,6 +774,7 @@ Tables without `tenantScope` are unaffected — no filtering regardless of `getT
 - **camelCase in API, any case in DB**: all request/response fields are camelCase. The plugin converts via `col()` and `colMap`. For snake_case DB columns (default), conversion is automatic. For camelCase DB columns (e.g. betterauth), the CLI generates a `colMap` that preserves the original column names — no conversion needed. Manual schemas without `colMap` fall back to `toUnderscore()`.
 - **All fields Optional in response**: `RETURNING *` may return any subset. Response schemas use `Type.Partial`.
 - **`excludeFromCreation`**: **IMPORTANT** — auto-increment PKs (e.g. `id` serial/auto_increment) MUST be listed here, otherwise INSERT will try to send them and fail. The CLI auto-detects this and adds it by default. Also useful for `createdAt`/`updatedAt` columns managed by DB defaults or hooks.
+- **`readExclude`**: fields hidden from every read — not projected by search/get, omitted from read response schemas and from this table's default (`*`) join selection when it is a join target. Referencing one from `filters`, `conditions`, `orderBy`, `joinGroup` aggregations or an explicit join `selection` returns 400: hiding a field from output while allowing it to be filtered would leak its value by bisection. **Writes are unaffected** — insert/update/bulk still accept the field, so a column can be writable but never readable (password hash, access token). Primary keys cannot be excluded. Complementary to trimming the Schema, which removes the column from reads *and* writes.
 - **`upsertMap`**: when present for a schema, INSERT becomes upsert. PostgreSQL: `ON CONFLICT (...) DO UPDATE`. MySQL/MariaDB: `ON DUPLICATE KEY UPDATE`. Applies to both main and secondary tables.
 - **`schemaOverrides`**: override auto-generated schema fields with stricter TypeBox types (e.g. `{ email: Type.String({ format: 'email' }) }`). Overrides are merged into the body schema for insert, update, and bulk-upsert. The original Schema file is never modified. In updates, overridden fields are still wrapped in Optional (validates only when present). Overrides appear in Swagger.
 - **Validation receives camelCase**: `validate` receives the original camelCase record (as sent by the client) and secondaries. Field names match the schema definition, with full TypeScript inference (`main.startDate`, not `main.start_date`). It returns `ValidationError[]` — tuples of `[field, code]` or `[field, code, message]`. If any errors are returned, the request is rejected with 400 before hooks or SQL execute.

package/README.md

@@ -4,6 +4,16 @@ Automatic CRUD API generation from PostgreSQL, MySQL, and MariaDB tables for [Fa
 
 Point it at your database, and get a full REST API with search, advanced conditions, pagination, joins, aggregations, bulk operations, multi-tenant isolation, validation, and hooks.
 
+## What LLMs Are Saying
+
+> API: 5 new read-only tables — and this is where your plugin really shined.
+
+> Yes, it genuinely saved me a lot of work, and the numbers make that obvious: I deleted about 350 lines of hand-written API repository and route code, replacing them with roughly 150 lines of declarative configuration. And it wasn't a one-for-one trade. In return, I gained features I simply didn't have before: complete Swagger documentation, the conditions DSL (previously I only had sorting and fixed filters), pagination with total counts, structured 400 errors, and consistent camelCase conversion. 
+
+> The moment I thought, "Okay, this is well designed," was when I used computedFields: the case of "attributes stored inside a jsonb column that still need to be sortable and filterable" is exactly the kind of problem that usually forces you to step outside the framework, yet it fit in cleanly. It worked end-to-end with the role-based CASE expression, remained sortable, could be projected with selectComputed, and required zero SQL in the routes.
+
+> The AGENTS files deserve a mention: I configured everything without ever opening the source code—CLI schema, defineTable, buildRelation, computed, extraFilters, and the frontend request/response shapes. As "documentation for agents," they genuinely work, and that's more than I can say for most libraries.
+
 ## Features
 
 - **Zero boilerplate** — define your tables, get 7 endpoints each
@@ -143,8 +153,9 @@ const TableCustomer = defineTable({
   ...exportTableInfo(SchemaCustomer),
 
   // Ordering & filtering
-  defaultOrder: 'name',                     // default ORDER BY
+  defaultOrder: 'name',                     // default ORDER BY (camelCase fields map to DB columns)
   excludeFromCreation: ['id'],              // omit from INSERT (e.g. auto-increment)
+  readExclude: ['passwordHash'],            // hide from all reads (writes unaffected)
   distinctResults: true,                    // SELECT DISTINCT
 
   // Relations — alias defaults to joinSchema.tableName. Override with `{ alias: '...' }`
@@ -320,6 +331,21 @@ only columns present in the generated Schema (as narrowed by `schemaOverrides` /
 column — the Schema is the write whitelist. Trim the generated Schema (or use `excludeFromCreation`)
 to keep sensitive columns out of it.
 
+### Read visibility
+
+`readExclude` hides columns from every read while leaving writes untouched — the case for a
+password hash or an access token: writable, never readable.
+
+```typescript
+readExclude: ['accessToken'],
+```
+
+Excluded fields are not selected by search/get, are omitted from read response schemas and from
+the table's default join selection, and cannot be referenced from `filters`, `conditions`,
+`orderBy`, aggregations or an explicit join `selection` (`400`). That last part is the point:
+letting a hidden field be filtered would leak its value by bisection. Primary keys cannot be
+excluded.
+
 ## API Reference
 
 ### POST /search/{table}

package/dist/bin/generate-tables.js

@@ -20,7 +20,7 @@ function printHelp() {
     console.log('  sqlapi-generate-tables --all');
     console.log('');
     display('Table*.ts files are only created if they do not already exist.', CONSOLE_COLORS.magenta);
-    display('dbTables.ts is always regenerated to include all schemas.', CONSOLE_COLORS.magenta);
+    display('dbTables.ts is created if missing, indexing the Table*.ts files present on disk.', CONSOLE_COLORS.magenta);
 }
 await runCli('fastify-auto-sqlapi: generating tables template', async () => {
     const cliArgs = parseArgs({
@@ -84,9 +84,11 @@ await runCli('fastify-auto-sqlapi: generating tables template', async () => {
             }
         }
     }
+    const tableVarOf = (schema) => 'Table' + schema.schemaName.replace(/^Schema/, '');
     // Generate individual Table*.ts files (skip if already exists)
+    const createdTableVars = [];
     for (const schema of targetSchemas) {
-        const tableVarName = 'Table' + schema.schemaName.replace(/^Schema/, '');
+        const tableVarName = tableVarOf(schema);
         const tableFile = path.join(tablesDir, `${tableVarName}.ts`);
         if (fs.existsSync(tableFile)) {
             displayAsTableRow(`${tableVarName}.ts`, 'skipped (already exists)', 60, CONSOLE_COLORS.gray);
@@ -94,17 +96,29 @@ await runCli('fastify-auto-sqlapi: generating tables template', async () => {
         else {
             const content = generateSingleTableFile(schema, allSchemas);
             fs.writeFileSync(tableFile, content);
+            createdTableVars.push(tableVarName);
             displayAsTableRow(`${tableVarName}.ts`, 'created', 60, CONSOLE_COLORS.green);
         }
     }
-    // Generate dbTables.ts only if it does not exist
+    // Generate dbTables.ts only if it does not exist. The index must reference only
+    // Table*.ts files actually present on disk, otherwise a subset run would emit
+    // imports for files that were never generated and the project would not compile.
     const dbTablesFile = path.join(tablesDir, 'dbTables.ts');
     if (fs.existsSync(dbTablesFile)) {
         displayAsTableRow('dbTables.ts', 'skipped (already exists)', 60, CONSOLE_COLORS.gray);
+        const indexContent = fs.readFileSync(dbTablesFile, 'utf-8');
+        const missing = createdTableVars.filter((v) => !indexContent.includes(v));
+        if (missing.length > 0) {
+            display(`Remember to add the new tables to dbTables.ts: ${missing.join(', ')}`, CONSOLE_COLORS.yellow);
+        }
     }
     else {
-        const dbTablesContent = generateDbTablesIndex(allSchemas);
-        fs.writeFileSync(dbTablesFile, dbTablesContent);
+        const existingTableVars = new Set(fs
+            .readdirSync(tablesDir)
+            .filter((f) => f.startsWith('Table') && f.endsWith('.ts'))
+            .map((f) => f.slice(0, -'.ts'.length)));
+        const indexSchemas = allSchemas.filter((s) => existingTableVars.has(tableVarOf(s)));
+        fs.writeFileSync(dbTablesFile, generateDbTablesIndex(indexSchemas));
         displayAsTableRow('dbTables.ts', 'created', 60, CONSOLE_COLORS.green);
     }
     console.log('');

package/dist/lib/cli/tables-codegen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tables-codegen.d.ts","sourceRoot":"","sources":["../../../src/lib/cli/tables-codegen.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAuCpE;AAuCD,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,gBAAgB,EAAE,CAwB3E;AAID,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,CAwHhG;AAID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAqBrE;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CA6FlE"}
+{"version":3,"file":"tables-codegen.d.ts","sourceRoot":"","sources":["../../../src/lib/cli/tables-codegen.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAuCpE;AAuCD,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,gBAAgB,EAAE,CAwB3E;AAID,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,CA2HhG;AAID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CAqBrE;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,CA6FlE"}

package/dist/lib/cli/tables-codegen.js

@@ -130,10 +130,10 @@ export function generateSingleTableFile(schema, allSchemas) {
     // Imports
     lines.push(`import {defineTable, exportTableInfo, Type} from 'fastify-auto-sqlapi';`);
     lines.push(`import type {ValidationError} from 'fastify-auto-sqlapi';`);
-    lines.push(`import {${schema.schemaName} as Schema} from '../schemas/${schema.schemaName}';`);
+    lines.push(`import {${schema.schemaName} as Schema} from '../schemas/${schema.schemaName}.js';`);
     // Commented imports for related schemas
     for (const relSchema of relatedSchemas) {
-        lines.push(`// import {${relSchema}} from '../schemas/${relSchema}';`);
+        lines.push(`// import {${relSchema}} from '../schemas/${relSchema}.js';`);
     }
     lines.push(``);
     // Extra filters placeholder
@@ -161,6 +161,8 @@ export function generateSingleTableFile(schema, allSchemas) {
     else {
         lines.push(`  // excludeFromCreation: [],`);
     }
+    // Hide columns from every read (writes still accept them, e.g. a password hash)
+    lines.push(`  // readExclude: [],`);
     if (parentRels.length > 0) {
         lines.push(`  // allowedReadJoins: [`);
         for (const rel of parentRels) {
@@ -213,7 +215,7 @@ export function generateDbTablesIndex(schemas) {
     lines.push(``);
     for (const schema of schemas) {
         const tableVarName = 'Table' + schema.schemaName.replace(/^Schema/, '');
-        lines.push(`import {${tableVarName}} from './${tableVarName}';`);
+        lines.push(`import {${tableVarName}} from './${tableVarName}.js';`);
     }
     lines.push(``);
     lines.push(`export const dbTables: DbTables = {`);
@@ -245,7 +247,7 @@ export function generateTablesFile(schemas) {
     lines.push(``);
     // Schema imports
     for (const schema of schemas) {
-        lines.push(`import {${schema.schemaName}} from './${schema.schemaName}';`);
+        lines.push(`import {${schema.schemaName}} from './${schema.schemaName}.js';`);
     }
     // Table definitions
     for (const schema of schemas) {

package/dist/lib/engine/rest/get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/rest/get.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAuB,MAAM,mBAAmB,CAAC;AAEnF,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CA6BrE"}
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/rest/get.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAuB,MAAM,mBAAmB,CAAC;AAEnF,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CA8BrE"}

package/dist/lib/engine/rest/get.js

@@ -2,6 +2,7 @@ import { ConditionBuilder } from 'node-condition-builder';
 import { camelcaseObject } from '../../naming.js';
 import { buildTenantCondition, buildTenantJoin } from '../../tenant.js';
 import { httpError } from '../../errors.js';
+import { readableSelectColumns } from '../../read-access.js';
 import { primaryAsString } from '../../../types.js';
 export async function getEngine(params) {
     const { db, tableConf, id, tenant } = params;
@@ -19,6 +20,7 @@ export async function getEngine(params) {
     const values = cb.getValues();
     const rows = await db.select({
         tableName: tableConf.Schema.tableName,
+        columns: readableSelectColumns(tableConf, tableConf.Schema, db),
         where,
         values,
         limit: '1',

package/dist/lib/engine/search/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/search/search.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,QAAQ,EACR,YAAY,EACZ,YAAY,EAcb,MAAM,mBAAmB,CAAC;AA4jC3B,wBAAsB,YAAY,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,YAAY,CAAC,CA2IvB"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/search/search.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,QAAQ,EACR,YAAY,EACZ,YAAY,EAcb,MAAM,mBAAmB,CAAC;AAmkC3B,wBAAsB,YAAY,CAChC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,YAAY,CAAC,CAkIvB"}

package/dist/lib/engine/search/search.js

@@ -1,14 +1,16 @@
-import { ConditionBuilder } from 'node-condition-builder';
+import { ConditionBuilder, Expression } from 'node-condition-builder';
 import { camelcaseObject } from '../../naming.js';
 import { buildTenantCondition, buildTenantJoin } from '../../tenant.js';
+import { assertReadable, assertFiltersReadable, readableSelectColumns } from '../../read-access.js';
 import { primaryAsString } from '../../../types.js';
 // ─── Schema field validation ────────────────────────────────
-function validateSchemaField(field, schema) {
+function validateSchemaField(field, schema, tableConf) {
     if (!(field in schema.fields)) {
         const err = new Error(`Unknown field: ${field}`);
         err.statusCode = 400;
         throw err;
     }
+    assertReadable(tableConf, field);
     return schema.col(field);
 }
 function err400(msg) {
@@ -37,15 +39,15 @@ function buildComputedContext(db, schema, alias) {
 }
 function resolveFieldRef(field, schema, tableConf, db, alias) {
     if (field in schema.fields) {
+        assertReadable(tableConf, field);
         const col = db.qi(schema.col(field));
         const expr = alias ? `${db.qi(alias)}.${col}` : col;
-        return { expr, values: [], computed: false };
+        return { expr, computed: false };
     }
     const fn = tableConf?.computedFields?.[field];
     if (fn) {
         const ctx = buildComputedContext(db, schema, alias);
-        const out = fn(ctx);
-        return { expr: out.expr, values: out.values ?? [], computed: true };
+        return { expr: computedExpression(field, fn(ctx)), computed: true };
     }
     err400(`Unknown field: ${field}`);
 }
@@ -95,16 +97,48 @@ function extractJoinRefs(db, tableConf, joinDef) {
     };
 }
 /**
- * Evaluate a computed field. When `allowBoundValues=false`, throws 400 if the computed binds
- * any parameters — used in positions where parameter binding cannot be coordinated (orderBy,
- * compute*, joinLeft.filters, etc).
+ * Evaluate a computed field into an Expression carrying its own bound values.
+ *
+ * Inside a WHERE clause the ConditionBuilder assigns the placeholder indexes, so bound
+ * values are always safe there. `allowBoundValues=false` is for the positions that sit
+ * *before* the WHERE values in the parameter order (SELECT projections, aggregations),
+ * where they cannot be placed correctly; those still reject with 400.
  */
-function evaluateComputedField(fn, schema, db, alias, message, allowBoundValues = false) {
+function evaluateComputedField(name, fn, schema, db, alias, message, allowBoundValues = false) {
     const ev = fn(buildComputedContext(db, schema, alias));
     if (!allowBoundValues && (ev.values?.length ?? 0) > 0) {
         err400(message);
     }
-    return ev;
+    return computedExpression(name, ev);
+}
+/**
+ * Build the Expression for a computed field, checking that it marks each bound value
+ * with a `?`.
+ *
+ * A mismatch is always a table-configuration bug and would otherwise produce a query that
+ * binds values nobody references — silently returning wrong rows. Expressions without
+ * bound values are exempt: they are emitted verbatim, so a `?` there is a literal operator
+ * (PostgreSQL jsonb) rather than a marker.
+ */
+function computedExpression(name, ev) {
+    const values = ev.values ?? [];
+    if (values.length > 0) {
+        const markers = (ev.expr.match(/\\\?|\?/g) ?? []).filter((m) => m === '?').length;
+        if (markers !== values.length) {
+            throw new Error(`Computed field '${name}' declares ${values.length} bound value(s) but its expression ` +
+                `contains ${markers} '?' marker(s). Mark each bound value with '?' (use '\\?' for a ` +
+                `literal question mark) so the engine can assign placeholder positions.`);
+        }
+    }
+    return new Expression(ev.expr, values);
+}
+/** Bound values carried by a resolved field reference. */
+function refValues(expr) {
+    return expr instanceof Expression ? [...expr.values] : [];
+}
+/** Render a resolved field reference to SQL, binding any values from `startIndex`. */
+function renderRef(expr, startIndex, db) {
+    return expr instanceof Expression ? expr.render(startIndex, db.ph) : expr;
 }
 /** Map rows from snake_case columns to camelCase fields, preserving any computed-field columns
  * that are projected by their declared name (skipped by camelcaseObject). */
@@ -121,11 +155,19 @@ function mapRowsToCamelCase(rows, schema, computedFieldNames) {
         return camel;
     });
 }
-/** Build the SELECT columns list for a join fetch: '*' or comma-separated quoted columns. */
-function buildSelectionColumns(selection, joinSchema, db) {
-    if (selection === '*')
-        return '*';
-    return selection.split(',').map((c) => db.qi(joinSchema.col(c.trim()))).join(', ');
+/**
+ * Build the SELECT columns list for a join fetch: '*' or comma-separated quoted columns.
+ * A default '*' selection narrows to the join table's readable columns when it declares
+ * `readExclude`; an explicit selection naming an excluded field is rejected with 400.
+ */
+function buildSelectionColumns(selection, joinSchema, db, joinTableConf) {
+    if (selection === '*') {
+        return readableSelectColumns(joinTableConf, joinSchema, db) ?? '*';
+    }
+    return selection
+        .split(',')
+        .map((c) => db.qi(validateSchemaField(c.trim(), joinSchema, joinTableConf)))
+        .join(', ');
 }
 const AGG_FN = {
     sum: { sql: 'SUM', distinct: false },
@@ -219,7 +261,7 @@ function validateOrderBy(orderBy, tableConf, db, dbTables, joinGroup, startIdx)
         if (dotted2) {
             const [, alias, field, dir] = dotted2;
             const joinDef = requireJoin(tableConf, alias, true);
-            const col = validateSchemaField(field, joinDef.joinSchema);
+            const col = validateSchemaField(field, joinDef.joinSchema, dbTables[joinDef.joinSchema.tableName]);
             // Reference the LEFT JOIN'd table via its alias (SQL identifier).
             outParts.push(`${db.qi(alias)}.${db.qi(col)} ${(dir || 'ASC').toUpperCase()}`);
             leftJoinAliases.add(alias);
@@ -232,9 +274,12 @@ function validateOrderBy(orderBy, tableConf, db, dbTables, joinGroup, startIdx)
         }
         const [, field, dir] = plain;
         const ref = resolveFieldRef(field, tableConf.Schema, tableConf, db);
-        outParts.push(`${ref.expr} ${(dir || 'ASC').toUpperCase()}`);
-        outValues.push(...ref.values);
-        currentIdx += ref.values.length;
+        // A computed field binds its own values here: ORDER BY is emitted after the WHERE, so
+        // its placeholders continue from `currentIdx`.
+        const refVals = refValues(ref.expr);
+        outParts.push(`${renderRef(ref.expr, currentIdx, db)} ${(dir || 'ASC').toUpperCase()}`);
+        outValues.push(...refVals);
+        currentIdx += refVals.length;
     }
     return { sql: outParts.join(', '), values: outValues, leftJoinAliases };
 }
@@ -259,6 +304,7 @@ function buildLeftJoinClauses(db, dbTables, tableConf, aliasesNeedingJoin, joinL
             const cb = new ConditionBuilder('AND', db.cbDialect);
             const joinTableConf = dbTables[joinSchema.tableName];
             const computed = joinTableConf?.computedFields;
+            assertFiltersReadable(ref.filters, joinTableConf);
             if (ref.filters) {
                 for (const [field, value] of Object.entries(ref.filters)) {
                     if (value === null || value === undefined)
@@ -267,9 +313,10 @@ function buildLeftJoinClauses(db, dbTables, tableConf, aliasesNeedingJoin, joinL
                         cb.isEqual(`${aliasIdent}.${db.qi(joinSchema.col(field))}`, value);
                     }
                     else if (computed?.[field]) {
-                        // Computed field on the parent table: build expr with alias-qualified columns.
-                        const ev = evaluateComputedField(computed[field], joinSchema, db, alias, `Computed field '${field}' with bound values is not supported in joinLeft.filters`);
-                        cb.isEqual(ev.expr, value);
+                        // Computed field on the parent table: expr with alias-qualified columns. Bound
+                        // values are placed by this ConditionBuilder, whose SQL lands in the WHERE.
+                        const expr = evaluateComputedField(field, computed[field], joinSchema, db, alias, '', true);
+                        cb.isEqual(expr, value);
                     }
                 }
             }
@@ -279,12 +326,13 @@ function buildLeftJoinClauses(db, dbTables, tableConf, aliasesNeedingJoin, joinL
                         err400(`Invalid condition method: ${c.method}`);
                     }
                     if (c.field in joinSchema.fields) {
+                        assertReadable(dbTables[joinSchema.tableName], c.field);
                         const col = `${aliasIdent}.${db.qi(joinSchema.col(c.field))}`;
                         dispatchConditionMethod(cb, c.method, col, c.params ?? []);
                     }
                     else if (computed?.[c.field]) {
-                        const ev = evaluateComputedField(computed[c.field], joinSchema, db, alias, `Computed field '${c.field}' with bound values is not supported in joinLeft.conditions`);
-                        dispatchConditionMethod(cb, c.method, ev.expr, c.params ?? []);
+                        const expr = evaluateComputedField(c.field, computed[c.field], joinSchema, db, alias, '', true);
+                        dispatchConditionMethod(cb, c.method, expr, c.params ?? []);
                     }
                     else {
                         err400(`Unknown field: ${c.field}`);
@@ -303,25 +351,58 @@ function buildLeftJoinClauses(db, dbTables, tableConf, aliasesNeedingJoin, joinL
     return { joinClauses, whereExtras, values };
 }
 // ─── Main query execution ───────────────────────────────────
+/**
+ * Converts a configured order (`defaultOrder` or the primary-key fallback) to SQL.
+ * Unlike the request `orderBy` (strictly validated by `validateOrderBy`), this is
+ * lenient for backward compatibility: tokens matching a camelCase schema field are
+ * mapped to their quoted DB column, computed fields (without bound values) expand
+ * to their expression, and anything else passes through unchanged as raw SQL.
+ */
+function convertConfiguredOrder(order, tableConf, db) {
+    return order
+        .split(',')
+        .map((part) => {
+        const trimmed = part.trim();
+        const match = trimmed.match(/^(\w+)(?:\s+(ASC|DESC))?$/i);
+        if (match) {
+            const [, field, dir] = match;
+            const suffix = dir ? ` ${dir.toUpperCase()}` : '';
+            if (field in tableConf.Schema.fields) {
+                return `${db.qi(tableConf.Schema.col(field))}${suffix}`;
+            }
+            const computed = tableConf.computedFields?.[field];
+            if (computed) {
+                const ev = evaluateComputedField(field, computed, tableConf.Schema, db, undefined, `Computed field '${field}' with bound values cannot be used in defaultOrder`);
+                return `${ev.value}${suffix}`;
+            }
+        }
+        return trimmed;
+    })
+        .join(', ');
+}
 async function executeMainQuery(db, tableConf, where, values, orderBy, paginator, extraJoins = [], selectComputed, maxRows) {
     const tableName = tableConf.Schema.tableName;
-    const order = orderBy || tableConf.defaultOrder || primaryAsString(tableConf.primary);
+    // Request orderBy arrives already validated and mapped by validateOrderBy;
+    // configured fallbacks (defaultOrder / primary key) are converted leniently here.
+    const order = orderBy || convertConfiguredOrder(tableConf.defaultOrder || primaryAsString(tableConf.primary), tableConf, db);
     // With a paginator, the page size governs the LIMIT. Without one, apply `maxRows` (if set) so an
     // unbounded search cannot dump the whole table; a plain integer is a safe, non-injectable LIMIT.
     const limit = paginator
         ? `${paginator.itemsPerPage} OFFSET ${(paginator.page - 1) * paginator.itemsPerPage}`
         : (maxRows != null ? String(maxRows) : null);
+    // Base projection: '*' unless the table hides fields via readExclude.
+    const readableColumns = readableSelectColumns(tableConf, tableConf.Schema, db);
     // Optional computed projections — bound values, if any, are NOT yet supported
     // here (would require placeholder-aware composition with WHERE values).
-    let columns;
+    let columns = readableColumns;
     if (selectComputed?.length) {
-        const projections = ['*'];
+        const projections = [readableColumns ?? '*'];
         for (const name of selectComputed) {
             const fn = tableConf.computedFields?.[name];
             if (!fn)
                 err400(`Unknown computed field in selectComputed: '${name}'`);
-            const out = evaluateComputedField(fn, tableConf.Schema, db, undefined, `Computed field '${name}' with bound values cannot be used in selectComputed`);
-            projections.push(`${out.expr} AS ${db.qi(name)}`);
+            const out = evaluateComputedField(name, fn, tableConf.Schema, db, undefined, `Computed field '${name}' with bound values cannot be used in selectComputed`);
+            projections.push(`${out.value} AS ${db.qi(name)}`);
         }
         columns = projections.join(', ');
     }
@@ -352,10 +433,12 @@ async function buildPagination(db, tableConf, where, values, paginator, extraJoi
     for (const { key, field, fn } of computations) {
         if (field) {
             const ref = resolveFieldRef(field, tableConf.Schema, tableConf, db);
-            if (ref.values.length > 0) {
+            // The aggregate sits in the SELECT list, before the WHERE values: a computed that
+            // binds parameters cannot be placed here.
+            if (refValues(ref.expr).length > 0) {
                 err400(`Computed field '${field}' with bound values cannot be used in compute${key.charAt(0).toUpperCase() + key.slice(1)}`);
             }
-            const result = await db.query(`SELECT ${fn}(${ref.expr}) as value FROM ${db.qi(tableName)}${joinClause} WHERE ${where}`, values);
+            const result = await db.query(`SELECT ${fn}(${renderRef(ref.expr, 1, db)}) as value FROM ${db.qi(tableName)}${joinClause} WHERE ${where}`, values);
             computed[key] = { [field]: result.rows[0].value };
         }
     }
@@ -383,15 +466,10 @@ async function executeJoinMultiple(db, dbTables, tableConf, mainResults, joinMul
         cb.isIn(db.qi(fkCol), ids);
         const tenantJoins = [];
         appendJoinTenantScope(db, joinTableConf, tenant, joinSchema.tableName, cb, tenantJoins);
-        let where = cb.build(1, db.ph);
-        let values = cb.getValues();
-        // Side-channel: computed-field clauses on the join table
-        const computedClauses = collectJoinRefComputedClauses(joinTableConf, ref || {}, db);
-        if (computedClauses.length > 0) {
-            ({ where, values } = appendComputedConditions(where, values, computedClauses, db));
-        }
+        const where = cb.build(1, db.ph);
+        const values = cb.getValues();
         const selection = ref?.selection ?? defaultSelection;
-        const columns = buildSelectionColumns(selection, joinSchema, db);
+        const columns = buildSelectionColumns(selection, joinSchema, db, joinTableConf);
         const rows = await db.select({
             tableName: joinSchema.tableName,
             columns,
@@ -425,7 +503,7 @@ async function executeJoinLeft(db, dbTables, tableConf, mainResults, joinLeft, t
         const where = cb.build(1, db.ph);
         const values = cb.getValues();
         const selection = ref?.selection ?? defaultSelection;
-        const columns = buildSelectionColumns(selection, joinSchema, db);
+        const columns = buildSelectionColumns(selection, joinSchema, db, joinTableConf);
         const rows = await db.select({
             tableName: joinSchema.tableName,
             columns,
@@ -453,7 +531,7 @@ function buildByExpression(by, joinSchema, joinTableConf, db) {
     }
     const fn = joinTableConf?.computedFields?.[by];
     if (fn) {
-        return evaluateComputedField(fn, joinSchema, db, undefined, `Computed field '${by}' with bound values cannot be used in aggregations.by`).expr;
+        return evaluateComputedField(by, fn, joinSchema, db, undefined, `Computed field '${by}' with bound values cannot be used in aggregations.by`).value;
     }
     err400(`Unknown field: ${by}`);
 }
@@ -482,7 +560,7 @@ async function executeJoinGroup(db, dbTables, tableConf, mainResults, joinGroup,
                 return;
             const fn = AGG_FN[kind];
             for (const f of fields) {
-                const col = validateSchemaField(f, joinSchema);
+                const col = validateSchemaField(f, joinSchema, joinTableConf);
                 selectParts.push(`${aggExpr(fn, db.qi(col))} as "${kind}_${f}"`);
             }
         };
@@ -502,13 +580,8 @@ async function executeJoinGroup(db, dbTables, tableConf, mainResults, joinGroup,
         cb.isIn(db.qi(fkCol), ids);
         const tenantJoins = [];
         appendJoinTenantScope(db, joinTableConf, tenant, joinSchema.tableName, cb, tenantJoins);
-        let where = cb.build(1, db.ph);
-        let values = cb.getValues();
-        // Side-channel: computed-field clauses on the join table
-        const computedClauses = collectJoinRefComputedClauses(joinTableConf, groupRef, db);
-        if (computedClauses.length > 0) {
-            ({ where, values } = appendComputedConditions(where, values, computedClauses, db));
-        }
+        const where = cb.build(1, db.ph);
+        const values = cb.getValues();
         const groupBy = groupByParts.length > 0 ? `GROUP BY ${groupByParts.join(', ')}` : '';
         const fromJoins = tenantJoins.length > 0 ? ` ${tenantJoins.join(' ')}` : '';
         const sql = `SELECT ${selectParts.join(', ')} FROM ${db.qi(joinSchema.tableName)}${fromJoins} WHERE ${where} ${groupBy}`;
@@ -568,63 +641,36 @@ function dispatchConditionMethod(cb, method, colOrExpr, params) {
     }
 }
 function buildJoinRefCondition(joinTableConf, joinSchema, ref, db) {
+    assertFiltersReadable(ref.filters, joinTableConf);
     const cb = (ref.filters && joinTableConf)
         ? joinTableConf.filters(ref.filters, db.cbDialect)
         : new ConditionBuilder('AND', db.cbDialect);
-    if (ref.conditions?.length) {
-        for (const c of ref.conditions) {
-            if (!ALLOWED_SET.has(c.method)) {
-                err400(`Invalid condition method: ${c.method}`);
-            }
-            // Skip computed-field conditions here — they are processed via side-channel
-            // by `collectJoinRefComputedClauses` since ConditionBuilder cannot bind values
-            // for an LHS expression.
-            if (joinTableConf?.computedFields?.[c.field])
-                continue;
-            const col = db.qi(validateSchemaField(c.field, joinSchema));
-            dispatchConditionMethod(cb, c.method, col, c.params ?? []);
-        }
-    }
-    return cb;
-}
-/**
- * Side-channel: gather equality + operator clauses targeting computed fields
- * declared on the join table's `computedFields`. To be appended to a WHERE
- * after the main `cb.build()` with correct placeholder offsets.
- */
-function collectJoinRefComputedClauses(joinTableConf, ref, db) {
-    const out = [];
+    // Equality filters targeting the join table's computed fields
     const computed = joinTableConf?.computedFields;
-    if (!computed)
-        return out;
-    // Equality filters on computed names
-    if (ref.filters) {
+    if (computed && ref.filters) {
         for (const [name, value] of Object.entries(ref.filters)) {
             if (value === null || value === undefined)
                 continue;
             if (!computed[name])
                 continue;
-            const ev = evaluateComputedField(computed[name], joinTableConf.Schema, db, undefined, '', true);
-            out.push({ method: 'isEqual', expr: ev.expr, values: ev.values ?? [], params: [value] });
+            const expr = evaluateComputedField(name, computed[name], joinTableConf.Schema, db, undefined, '', true);
+            cb.isEqual(expr, value);
         }
     }
-    // Operator conditions on computed names
     if (ref.conditions?.length) {
         for (const c of ref.conditions) {
-            if (!computed[c.field])
-                continue;
-            if (!ALLOWED_SET.has(c.method))
+            if (!ALLOWED_SET.has(c.method)) {
                 err400(`Invalid condition method: ${c.method}`);
-            const ev = evaluateComputedField(computed[c.field], joinTableConf.Schema, db, undefined, '', true);
-            out.push({
-                method: c.method,
-                expr: ev.expr,
-                values: ev.values ?? [],
-                params: c.params ?? [],
-            });
+            }
+            // Computed fields resolve to an Expression carrying their own bound values, which
+            // the ConditionBuilder places together with the compared value.
+            const operand = computed?.[c.field]
+                ? evaluateComputedField(c.field, computed[c.field], joinTableConf.Schema, db, undefined, '', true)
+                : db.qi(validateSchemaField(c.field, joinSchema, joinTableConf));
+            dispatchConditionMethod(cb, c.method, operand, c.params ?? []);
         }
     }
-    return out;
+    return cb;
 }
 /**
  * Apply non-dotted conditions to the main `condition` ConditionBuilder when
@@ -633,7 +679,6 @@ function collectJoinRefComputedClauses(joinTableConf, ref, db) {
  * offsets), since ConditionBuilder cannot bind values for an LHS expression.
  */
 function applyConditions(condition, conditions, schema, tableConf, db) {
-    const computedClauses = [];
     for (const c of conditions) {
         // Skip dot-notation fields — those become aggregation conditions processed later
         if (c.field.includes('.'))
@@ -641,63 +686,29 @@ function applyConditions(condition, conditions, schema, tableConf, db) {
         if (!ALLOWED_SET.has(c.method)) {
             err400(`Invalid condition method: ${c.method}`);
         }
+        // A computed field resolves to an Expression carrying its own bound values; the
+        // ConditionBuilder places them, so no placeholder offset is computed here.
         const ref = resolveFieldRef(c.field, schema, tableConf, db);
-        if (!ref.computed) {
-            dispatchConditionMethod(condition, c.method, ref.expr, c.params);
-        }
-        else {
-            computedClauses.push({
-                method: c.method,
-                expr: ref.expr,
-                values: ref.values,
-                params: c.params ?? [],
-            });
-        }
+        dispatchConditionMethod(condition, c.method, ref.expr, c.params);
     }
-    return computedClauses;
 }
 /**
- * Equality filters targeting computed fields: when `filters.<computedName>` is
- * set on the request body and the computed exists on `tableConf.computedFields`,
- * generate a side-channel clause `<expr> = ?` with the user value as parameter.
- * This complements the auto-generated equality on schema fields done by
- * `tableConf.filters()`.
+ * Equality filters targeting computed fields: `filters.<computedName>` becomes
+ * `<expr> = <value>` on the same ConditionBuilder used for schema fields, which
+ * `tableConf.filters()` has already populated.
  */
-function collectComputedFilterClauses(filters, tableConf, db) {
-    const out = [];
+function applyComputedFilters(condition, filters, tableConf, db) {
     const computed = tableConf.computedFields;
     if (!computed)
-        return out;
+        return;
     for (const [name, value] of Object.entries(filters)) {
         if (value === null || value === undefined)
             continue;
         if (!computed[name])
             continue;
-        const ref = evaluateComputedField(computed[name], tableConf.Schema, db, undefined, '', true);
-        out.push({ method: 'isEqual', expr: ref.expr, values: ref.values ?? [], params: [value] });
-    }
-    return out;
-}
-/**
- * Append computed-field condition clauses (side-channel from applyConditions)
- * to the current WHERE, coordinating placeholder indices with the running
- * `values` array.
- */
-function appendComputedConditions(currentWhere, currentValues, clauses, db) {
-    let where = currentWhere;
-    let values = [...currentValues];
-    for (const c of clauses) {
-        // Append the computed's own bound values first; the expr placeholders
-        // (if any) reference them via stable indices set by the consumer.
-        values = [...values, ...c.values];
-        const tmpCb = new ConditionBuilder('AND', db.cbDialect);
-        dispatchConditionMethod(tmpCb, c.method, c.expr, c.params);
-        const startIdx = values.length + 1;
-        const clauseSql = tmpCb.build(startIdx, db.ph);
-        where += ` AND ${clauseSql}`;
-        values.push(...tmpCb.getValues());
+        const expr = evaluateComputedField(name, computed[name], tableConf.Schema, db, undefined, '', true);
+        condition.isEqual(expr, value);
     }
-    return { where, values };
 }
 function appendAggConditions(currentWhere, currentValues, conditions, db, dbTables, tableConf, joinGroup) {
     let where = currentWhere;
@@ -736,20 +747,11 @@ function buildJoinMustExistClauses(db, dbTables, tableConf, joinMustExist, curre
         const filterCondition = buildJoinRefCondition(joinTableConf, joinSchema, ref, db);
         const tenantJoins = [];
         appendJoinTenantScope(db, joinTableConf, tenant, joinSchema.tableName, filterCondition, tenantJoins);
+        // The sub-condition (computed fields included) is built by the ConditionBuilder, which
+        // numbers its placeholders from where the outer values end.
         const startIdx = values.length + 1;
-        let filterWhere = filterCondition.build(startIdx, db.ph);
-        let filterVals = [...filterCondition.getValues()];
-        // Side-channel: computed-field clauses
-        const computedClauses = collectJoinRefComputedClauses(joinTableConf, ref, db);
-        if (computedClauses.length > 0) {
-            let cwhere = filterWhere;
-            let cvalues = filterVals;
-            ({ where: cwhere, values: cvalues } = appendComputedConditions(cwhere, [...values, ...cvalues], computedClauses, db));
-            // appendComputedConditions starts with currentValues; we need just the
-            // delta belonging to this EXISTS subquery to update filterVals.
-            filterVals = cvalues.slice(values.length);
-            filterWhere = cwhere;
-        }
+        const filterWhere = filterCondition.build(startIdx, db.ph);
+        const filterVals = [...filterCondition.getValues()];
         // Qualify the FK with the join table: the EXISTS FROM may include the tenant
         // through-join, so a bare column could become ambiguous.
         const innerWhere = filterWhere
@@ -778,16 +780,16 @@ export async function searchEngine(dbTables, params) {
         for (const a of Object.keys(joinLeft))
             requireJoin(tableConf, a, true);
     // Build main condition
+    assertFiltersReadable(filters, tableConf);
     const condition = tableConf.filters(filters || {}, db.cbDialect);
-    // Filters that target computed fields (declared on tableConf.computedFields)
-    // are applied via the side-channel pattern further down.
-    let computedFilterClauses = [];
+    // Filters and conditions targeting computed fields go on the same ConditionBuilder:
+    // a computed resolves to an Expression carrying its own values, and the builder is
+    // what assigns every placeholder index.
     if (filters && tableConf.computedFields) {
-        computedFilterClauses = collectComputedFilterClauses(filters, tableConf, db);
+        applyComputedFilters(condition, filters, tableConf, db);
     }
-    let computedConditionClauses = [];
     if (conditions?.length) {
-        computedConditionClauses = applyConditions(condition, conditions, tableConf.Schema, tableConf, db);
+        applyConditions(condition, conditions, tableConf.Schema, tableConf, db);
     }
     // Tenant
     const tenantJoins = [];
@@ -799,14 +801,6 @@ export async function searchEngine(dbTables, params) {
     }
     let where = condition.build(1, db.ph);
     let values = [...condition.getValues()];
-    // Append computed filter (equality) and condition (operator) clauses with
-    // correct placeholder offsets.
-    if (computedFilterClauses.length > 0) {
-        ({ where, values } = appendComputedConditions(where, values, computedFilterClauses, db));
-    }
-    if (computedConditionClauses.length > 0) {
-        ({ where, values } = appendComputedConditions(where, values, computedConditionClauses, db));
-    }
     // joinMustExist (EXISTS)
     if (joinMustExist && Object.keys(joinMustExist).length > 0) {
         ({ where, values } = buildJoinMustExistClauses(db, dbTables, tableConf, joinMustExist, where, values, tenant));

package/dist/lib/read-access.d.ts

@@ -0,0 +1,31 @@
+import type { QueryClient } from './db.js';
+import type { ITable, SchemaDefinition } from '../types.js';
+/**
+ * Read visibility (`ITable.readExclude`).
+ *
+ * Excluded fields are never projected by any read query and cannot be referenced
+ * from filters, conditions, orderBy, aggregations or join selections: allowing a
+ * field to be filtered while hiding it from the output would still leak its value
+ * by bisection. Write paths (insert/update/upsert) are deliberately unaffected —
+ * a field can be writable but never readable (e.g. a password hash).
+ */
+export declare function isReadExcluded(tableConf: ITable | undefined, field: string): boolean;
+/** Throws 400 when `field` is read-excluded on `tableConf`. */
+export declare function assertReadable(tableConf: ITable | undefined, field: string): void;
+/**
+ * Throws 400 when a filter map targets a read-excluded field. Keys that are not
+ * excluded pass through untouched (extraFilters and computed names included).
+ */
+export declare function assertFiltersReadable(filters: Record<string, unknown> | undefined, tableConf: ITable | undefined): void;
+/** Schema field names that may be read, in schema declaration order. */
+export declare function readableFieldNames(tableConf: ITable | undefined, schema: SchemaDefinition): string[];
+/**
+ * SELECT column list for a table with read exclusions, or `undefined` when the
+ * table has none (callers keep their existing `*` projection).
+ *
+ * Columns are qualified with the table name: read queries may carry a tenant
+ * `through` INNER JOIN, where a bare column name shared with the through table
+ * would be ambiguous.
+ */
+export declare function readableSelectColumns(tableConf: ITable | undefined, schema: SchemaDefinition, db: QueryClient): string | undefined;
+//# sourceMappingURL=read-access.d.ts.map

package/dist/lib/read-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-access.d.ts","sourceRoot":"","sources":["../../src/lib/read-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG5D;;;;;;;;GAQG;AAEH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAEpF;AAED,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIjF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC5C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,IAAI,CAKN;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,gBAAgB,GACvB,MAAM,EAAE,CAIV;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,gBAAgB,EACxB,EAAE,EAAE,WAAW,GACd,MAAM,GAAG,SAAS,CAMpB"}

package/dist/lib/read-access.js

@@ -0,0 +1,53 @@
+import { httpError } from './errors.js';
+/**
+ * Read visibility (`ITable.readExclude`).
+ *
+ * Excluded fields are never projected by any read query and cannot be referenced
+ * from filters, conditions, orderBy, aggregations or join selections: allowing a
+ * field to be filtered while hiding it from the output would still leak its value
+ * by bisection. Write paths (insert/update/upsert) are deliberately unaffected —
+ * a field can be writable but never readable (e.g. a password hash).
+ */
+export function isReadExcluded(tableConf, field) {
+    return tableConf?.readExclude?.includes(field) ?? false;
+}
+/** Throws 400 when `field` is read-excluded on `tableConf`. */
+export function assertReadable(tableConf, field) {
+    if (isReadExcluded(tableConf, field)) {
+        throw httpError(400, `Field is not readable: ${field}`);
+    }
+}
+/**
+ * Throws 400 when a filter map targets a read-excluded field. Keys that are not
+ * excluded pass through untouched (extraFilters and computed names included).
+ */
+export function assertFiltersReadable(filters, tableConf) {
+    if (!filters || !tableConf?.readExclude?.length)
+        return;
+    for (const key of Object.keys(filters)) {
+        assertReadable(tableConf, key);
+    }
+}
+/** Schema field names that may be read, in schema declaration order. */
+export function readableFieldNames(tableConf, schema) {
+    const fields = Object.keys(schema.fields);
+    if (!tableConf?.readExclude?.length)
+        return fields;
+    return fields.filter((f) => !isReadExcluded(tableConf, f));
+}
+/**
+ * SELECT column list for a table with read exclusions, or `undefined` when the
+ * table has none (callers keep their existing `*` projection).
+ *
+ * Columns are qualified with the table name: read queries may carry a tenant
+ * `through` INNER JOIN, where a bare column name shared with the through table
+ * would be ambiguous.
+ */
+export function readableSelectColumns(tableConf, schema, db) {
+    if (!tableConf?.readExclude?.length)
+        return undefined;
+    const table = db.qi(schema.tableName);
+    return readableFieldNames(tableConf, schema)
+        .map((f) => `${table}.${db.qi(schema.col(f))}`)
+        .join(', ');
+}

package/dist/lib/schema/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/lib/schema/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAErE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAY/C,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAuHlF;AAED,eAAO,MAAM,sBAAsB;;;;;;;;EASjC,CAAC;AAEH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAmElF"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/lib/schema/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAGrE,OAAO,KAAK,EAAE,QAAQ,EAA4B,MAAM,gBAAgB,CAAC;AAyBzE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAuHlF;AAED,eAAO,MAAM,sBAAsB;;;;;;;;EASjC,CAAC;AAEH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAsElF"}

package/dist/lib/schema/search.js

@@ -1,5 +1,16 @@
 import { Type } from '@sinclair/typebox';
 import { ALLOWED_METHODS } from '../condition-methods.js';
+import { readableFieldNames } from '../read-access.js';
+/** Schema fields minus the ones hidden by `readExclude`. */
+function readableFields(schema, tableConf) {
+    if (!tableConf?.readExclude?.length)
+        return { ...schema.fields };
+    const out = {};
+    for (const field of readableFieldNames(tableConf, schema)) {
+        out[field] = schema.fields[field];
+    }
+    return out;
+}
 const JoinGroupResultItem = Type.Object({
     sum: Type.Optional(Type.Record(Type.String(), Type.Any())),
     min: Type.Optional(Type.Record(Type.String(), Type.Any())),
@@ -38,7 +49,7 @@ export function SearchTableBodyPost(dbTables, tableName) {
         }
     }
     const filterFields = {
-        ...schema.fields,
+        ...readableFields(schema, tableConf),
         ...tableConf.extraFilters,
         ...computedTypes,
     };
@@ -71,7 +82,7 @@ export function SearchTableBodyPost(dbTables, tableName) {
                 }
             }
             const joinFilterFields = joinTableConf
-                ? { ...joinSchema.fields, ...joinTableConf.extraFilters, ...joinComputedTypes }
+                ? { ...readableFields(joinSchema, joinTableConf), ...joinTableConf.extraFilters, ...joinComputedTypes }
                 : { ...joinSchema.fields };
             const joinRefShape = {
                 filters: Type.Optional(Type.Partial(Type.Object(joinFilterFields))),
@@ -150,16 +161,17 @@ export function SearchTableResponse(dbTables, tableName) {
             }
         }
     }
+    const mainReadable = readableFields(tableConf.Schema, tableConf);
     const mainItem = Object.keys(computedTypes).length > 0
-        ? Type.Partial(Type.Object({ ...tableConf.Schema.fields, ...computedTypes }))
-        : Type.Partial(Type.Object(tableConf.Schema.fields));
+        ? Type.Partial(Type.Object({ ...mainReadable, ...computedTypes }))
+        : Type.Partial(Type.Object(mainReadable));
     const joinMultipleProps = {};
     const joinLeftProps = {};
     const joinGroupProps = {};
     if (tableConf.allowedReadJoins) {
         for (const joinDef of tableConf.allowedReadJoins) {
             const { joinSchema, alias, unique } = joinDef;
-            const itemArray = Type.Array(Type.Partial(Type.Object(joinSchema.fields)));
+            const itemArray = Type.Array(Type.Partial(Type.Object(readableFields(joinSchema, dbTables[joinSchema.tableName]))));
             if (unique) {
                 joinLeftProps[alias] = itemArray;
             }

package/dist/lib/sql-api-decorator.d.ts

@@ -0,0 +1,18 @@
+import type { FastifyInstance } from 'fastify';
+import { type SqlApi } from './sql-api.js';
+import type { SqlApiPluginOptions } from '../types.js';
+declare module 'fastify' {
+    interface FastifyInstance {
+        sqlApi: SqlApi;
+    }
+}
+/**
+ * Decorates `fastify.sqlApi` (lazy getter) on the given instance unless the
+ * decorator is already present in scope. The main plugin calls this at the
+ * fp level (parent scope); granular route plugins call it through
+ * `registerForAllTables` so they also work standalone, each within its own
+ * encapsulation context. The underlying pool (`fastify.pg` / `fastify.mysql`)
+ * is shared either way.
+ */
+export declare function ensureSqlApiDecorator(fastify: FastifyInstance, options: SqlApiPluginOptions): void;
+//# sourceMappingURL=sql-api-decorator.d.ts.map

package/dist/lib/sql-api-decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-api-decorator.d.ts","sourceRoot":"","sources":["../../src/lib/sql-api-decorator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CA2BN"}

package/dist/lib/sql-api-decorator.js

@@ -0,0 +1,40 @@
+import { createQueryClient } from './db.js';
+import { pgQueryable } from './adapters/pg-adapter.js';
+import { mysqlQueryable } from './adapters/mysql-adapter.js';
+import { createSqlApi } from './sql-api.js';
+/**
+ * Decorates `fastify.sqlApi` (lazy getter) on the given instance unless the
+ * decorator is already present in scope. The main plugin calls this at the
+ * fp level (parent scope); granular route plugins call it through
+ * `registerForAllTables` so they also work standalone, each within its own
+ * encapsulation context. The underlying pool (`fastify.pg` / `fastify.mysql`)
+ * is shared either way.
+ */
+export function ensureSqlApiDecorator(fastify, options) {
+    if (fastify.hasDecorator('sqlApi'))
+        return;
+    // Lazy-init QueryClient (internal closure — not decorated on fastify)
+    let cachedDb;
+    function getDb() {
+        if (!cachedDb) {
+            const pool = (options.dialect === 'mysql' || options.dialect === 'mariadb')
+                ? mysqlQueryable(fastify.mysql)
+                : pgQueryable(fastify.pg);
+            cachedDb = createQueryClient(pool, options.dialect);
+            if (options.debug)
+                cachedDb.setDebug(true);
+        }
+        return cachedDb;
+    }
+    let cachedSqlApi;
+    fastify.decorate('sqlApi', {
+        getter() {
+            if (!cachedSqlApi) {
+                cachedSqlApi = createSqlApi(getDb(), options.DbTables, {
+                    getTenantId: options.getTenantId,
+                });
+            }
+            return cachedSqlApi;
+        },
+    });
+}

package/dist/lib/table-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA0BhG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAKX;AA2CD,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAShB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}
+{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA0BhG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAMX;AAkED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAShB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}

package/dist/lib/table-helpers.js

@@ -33,8 +33,26 @@ export function defineTable(config) {
     validateAliasUniqueness(config.allowedReadJoins, 'allowedReadJoins');
     validateAliasUniqueness(config.allowedWriteJoins, 'allowedWriteJoins');
     validateComputedFields(config);
+    validateReadExclude(config);
     return config;
 }
+function validateReadExclude(config) {
+    const excluded = config.readExclude;
+    if (!excluded?.length)
+        return;
+    const schemaFields = Object.keys(config.Schema.fields);
+    const pkFields = Array.isArray(config.primary) ? config.primary : [config.primary];
+    for (const field of excluded) {
+        if (!schemaFields.includes(field)) {
+            throw new Error(`defineTable: readExclude field '${field}' is not a schema field on ` +
+                `table '${config.Schema.tableName}'.`);
+        }
+        if (pkFields.includes(field)) {
+            throw new Error(`defineTable: readExclude cannot hide the primary key field '${field}' on ` +
+                `table '${config.Schema.tableName}' — reads and joins rely on it.`);
+        }
+    }
+}
 function validateComputedFields(config) {
     const computed = config.computedFields;
     if (!computed)

package/dist/routes/auto/plugin.d.ts

@@ -1,11 +1,5 @@
 import type { FastifyInstance } from 'fastify';
-import { type SqlApi } from '../../lib/sql-api.js';
 import type { SqlApiPluginOptions } from '../../types.js';
-declare module 'fastify' {
-    interface FastifyInstance {
-        sqlApi: SqlApi;
-    }
-}
 declare const _default: (fastify: FastifyInstance, options: SqlApiPluginOptions) => Promise<void>;
 export default _default;
 //# sourceMappingURL=plugin.d.ts.map

package/dist/routes/auto/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAO7D,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,sBAAsB,CAAC;AASjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB;CACF;kCAuDU,eAAe,WACf,mBAAmB,KAC3B,OAAO,CAAC,IAAI,CAAC;AAHhB,wBAiFoC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,SAAS,CAAC;AAa7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;kCAuD/C,eAAe,WACf,mBAAmB,KAC3B,OAAO,CAAC,IAAI,CAAC;AAHhB,wBA0DoC"}

package/dist/routes/auto/plugin.js

@@ -1,10 +1,7 @@
 import fp from 'fastify-plugin';
 import { ConditionBuilder } from 'node-condition-builder';
 import { getDialect } from '../../lib/dialect.js';
-import { createQueryClient } from '../../lib/db.js';
-import { pgQueryable } from '../../lib/adapters/pg-adapter.js';
-import { mysqlQueryable } from '../../lib/adapters/mysql-adapter.js';
-import { createSqlApi } from '../../lib/sql-api.js';
+import { ensureSqlApiDecorator } from '../../lib/sql-api-decorator.js';
 import { setupSwagger } from '../../lib/setup-swagger.js';
 import searchRoutes from './search.routes.js';
 import getRoutes from './get.routes.js';
@@ -56,31 +53,8 @@ export default fp(async function fastifyAutoSqlApi(fastify, options) {
     // Set ConditionBuilder dialect globally
     const dialect = getDialect(options.dialect || 'postgres');
     ConditionBuilder.DIALECT = dialect.cbDialect;
-    // Lazy-init QueryClient (internal closure — not decorated on fastify)
-    let cachedDb;
-    function getDb() {
-        if (!cachedDb) {
-            const pool = (options.dialect === 'mysql' || options.dialect === 'mariadb')
-                ? mysqlQueryable(fastify.mysql)
-                : pgQueryable(fastify.pg);
-            cachedDb = createQueryClient(pool, options.dialect);
-            if (options.debug)
-                cachedDb.setDebug(true);
-        }
-        return cachedDb;
-    }
     // SqlApi: exposed to parent scope via fp
-    let cachedSqlApi;
-    fastify.decorate('sqlApi', {
-        getter() {
-            if (!cachedSqlApi) {
-                cachedSqlApi = createSqlApi(getDb(), options.DbTables, {
-                    getTenantId: options.getTenantId,
-                });
-            }
-            return cachedSqlApi;
-        },
-    });
+    ensureSqlApiDecorator(fastify, options);
     // Routes in a child scope — prefix applies here, not at fp level
     const { prefix, ...routeOptions } = options;
     await fastify.register(async (instance) => {

package/dist/routes/auto/route-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/route-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE5F,KAAK,WAAW,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;AAElG,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAE9F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQlG;AAED,UAAU,WAAW;IAEnB,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX,MAAM,CAAC,EAAE,GAAG,CAAC;IAEb,WAAW,CAAC,EAAE,GAAG,CAAC;IAElB,QAAQ,CAAC,EAAE,GAAG,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,iGAAiG;IACjG,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1C,gFAAgF;IAChF,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,aAAa,EAAE,GAAG,GAAG,GAAG,CAAC;IACzB,wIAAwI;IACxI,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,WAAW,CAAC;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC;IACpF;2EACuE;IACvE,MAAM,EAAE,CACN,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAiCf"}
+{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/route-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE5F,KAAK,WAAW,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;AAElG,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAE9F;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQlG;AAED,UAAU,WAAW;IAEnB,IAAI,CAAC,EAAE,GAAG,CAAC;IAEX,MAAM,CAAC,EAAE,GAAG,CAAC;IAEb,WAAW,CAAC,EAAE,GAAG,CAAC;IAElB,QAAQ,CAAC,EAAE,GAAG,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,iGAAiG;IACjG,SAAS,EAAE,cAAc,CAAC;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC1C,gFAAgF;IAChF,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;IACnC,aAAa,EAAE,GAAG,GAAG,GAAG,CAAC;IACzB,wIAAwI;IACxI,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,WAAW,CAAC;IACnF,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC;IACpF;2EACuE;IACvE,MAAM,EAAE,CACN,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,KAChB,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAqCf"}

package/dist/routes/auto/route-helpers.js

@@ -1,3 +1,4 @@
+import { ensureSqlApiDecorator } from '../../lib/sql-api-decorator.js';
 export function mergeOnRequests(options, tableConf) {
     return [...(options.onRequests || []), ...(tableConf.onRequests || [])];
 }
@@ -16,6 +17,9 @@ export function buildWriteDescription(action, tableName, tableConf) {
  * default reply when handler returns a value.
  */
 export async function registerForAllTables(fastify, options, spec) {
+    // Granular composition support: when a route plugin is registered without the
+    // main plugin, no ancestor has decorated `sqlApi` — create it in this scope.
+    ensureSqlApiDecorator(fastify, options);
     const { DbTables } = options;
     for (const [tableName, tableConf] of Object.entries(DbTables)) {
         // operations acts as a whitelist; when omitted every operation is exposed.

package/dist/types/computed.d.ts

@@ -15,10 +15,20 @@ export interface ComputedFieldContext {
 }
 /**
  * Result returned by a ComputedFieldFn.
- *  - `expr`: SQL fragment usable as a scalar expression.
- *  - `values`: bound parameter values (always parameterized — never interpolate
- *    user-derived data into `expr`).
+ *  - `expr`: SQL fragment usable as a scalar expression. Mark each bound value with `?`
+ *    (use `\?` for a literal question mark, e.g. the PostgreSQL jsonb operator). The engine
+ *    assigns the placeholder positions — never write `$1` / `db.ph(n)` yourself, and never
+ *    interpolate user-derived data into the SQL.
+ *  - `values`: bound parameter values, one per `?` marker in `expr`. A mismatch between
+ *    markers and values is rejected: it would bind values the query never references.
  *  - `type`: TypeBox schema for Swagger filters and main response (REQUIRED).
+ *
+ * Example:
+ *   ({ qiCol }) => ({
+ *     expr: `CASE WHEN ${qiCol('role')} = ? THEN ${qiCol('salary')} ELSE 0 END`,
+ *     values: ['admin'],
+ *     type: Type.Number(),
+ *   })
  */
 export interface ComputedFieldExpr {
     expr: string;

package/dist/types/computed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"computed.d.ts","sourceRoot":"","sources":["../../src/types/computed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,WAAW,CAAC;IAChB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;CAC7D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,oBAAoB,KAAK,iBAAiB,CAAC"}
+{"version":3,"file":"computed.d.ts","sourceRoot":"","sources":["../../src/types/computed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,WAAW,CAAC;IAChB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;CAC7D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,oBAAoB,KAAK,iBAAiB,CAAC"}

package/dist/types/table.d.ts

@@ -102,6 +102,19 @@ export interface ITable<F extends Record<string, TSchema> = Record<string, TSche
      * affected.
      */
     operations?: TableOperation[];
+    /**
+     * Fields hidden from every read: they are not projected by search/get, not included
+     * in the read response schemas, and omitted from this table's default join selection
+     * when it is the target of a join.
+     *
+     * Referencing an excluded field from filters, conditions, orderBy, aggregations or an
+     * explicit join selection is rejected with 400 — hiding a field from the output while
+     * letting it be filtered would still leak its value by bisection.
+     *
+     * Write paths are NOT affected: a field can be writable but never readable (e.g. a
+     * password hash). Primary-key fields cannot be excluded.
+     */
+    readExclude?: (string & keyof F)[];
     defaultOrder?: string;
     excludeFromCreation?: (string & keyof F)[];
     distinctResults?: boolean;

package/dist/types/table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/types/table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,WAAW,IAAI,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEpE,4FAA4F;AAC5F,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,YAAY,CAAC;AAEjB,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;AACrE,MAAM,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC;AAC/F;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,SAAS,KAAK,gBAAgB,CAAC;AAE7F,MAAM,WAAW,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjF,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACjD,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,YAAY,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClC,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,KAC1D,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,EAC7D,sBAAsB,CAAC,EAAE,OAAO,KAC7B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAAE,EACzC,gBAAgB,CAAC,EAAE,OAAO,KACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,EAC7D,gBAAgB,CAAC,EAAE,OAAO,EAC1B,eAAe,CAAC,EAAE,OAAO,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,GAAG,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,GAAG,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,CACjB,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAC5B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IAC3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC;IAChG,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAGD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAGnD,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAE7D;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAEpG"}
+{"version":3,"file":"table.d.ts","sourceRoot":"","sources":["../../src/types/table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,WAAW,IAAI,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEpE,4FAA4F;AAC5F,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,KAAK,GACL,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,YAAY,CAAC;AAEjB,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;AACrE,MAAM,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC;AAC/F;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,SAAS,KAAK,gBAAgB,CAAC;AAE7F,MAAM,WAAW,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACjF,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACjD,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,YAAY,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClC,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,KAC1D,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,EAC7D,sBAAsB,CAAC,EAAE,OAAO,KAC7B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAAE,EACzC,gBAAgB,CAAC,EAAE,OAAO,KACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI;KAAE,EAC7D,gBAAgB,CAAC,EAAE,OAAO,EAC1B,eAAe,CAAC,EAAE,OAAO,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,CACb,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,GAAG,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,CACZ,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,MAAM,GAAG,MAAM,KAChB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,CACjB,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KACrB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,EAAE,EAAE,WAAW,EACf,GAAG,EAAE,cAAc,EACnB,UAAU,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAC5B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;IAC3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC;IAChG,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAGD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAGnD,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAE7D;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,CAEpG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fastify-auto-sqlapi",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Fastify plugin for automatic CRUD API generation from PostgreSQL, MySQL and MariaDB tables",
   "type": "module",
   "main": "./dist/index.js",
@@ -64,7 +64,7 @@
   "homepage": "https://github.com/LucaRainone/fastify-auto-sqlapi#readme",
   "dependencies": {
     "@sinclair/typebox": "^0.34.14",
-    "node-condition-builder": "^1.0.6"
+    "node-condition-builder": "^1.2.0"
   },
   "devDependencies": {
     "@fastify/postgres": "^6.0.2",