fastify-auto-sqlapi 0.1.9 → 0.1.11

package/dist/lib/agent/manifest.js

@@ -0,0 +1,153 @@
+import { isCompositePrimary } from '../../types.js';
+const ALL_OPERATIONS = [
+    'search', 'get', 'insert', 'update', 'delete', 'bulkUpsert', 'bulkDelete',
+];
+const SINGLE_PK_OPERATIONS = new Set(['get', 'delete', 'bulkDelete']);
+function shortType(schema) {
+    if (!schema)
+        return 'any';
+    const t = schema.type;
+    if (!t)
+        return 'any';
+    const types = (Array.isArray(t) ? t : [t]).filter((x) => x !== 'null');
+    return types[0] ?? 'any';
+}
+function isNullable(schema) {
+    const t = schema?.type;
+    return Array.isArray(t) && t.includes('null');
+}
+function computedTypes(tableConf) {
+    if (!tableConf.computedFields)
+        return undefined;
+    const out = {};
+    for (const [name, fn] of Object.entries(tableConf.computedFields)) {
+        try {
+            const stub = fn({
+                db: { qi: (s) => s, dialectName: 'postgres' },
+                qiCol: () => '""',
+            });
+            out[name] = shortType(stub.type);
+        }
+        catch {
+            out[name] = 'any';
+        }
+    }
+    return Object.keys(out).length ? out : undefined;
+}
+export function tableOperations(tableConf) {
+    const requested = tableConf.operations ?? ALL_OPERATIONS;
+    if (!isCompositePrimary(tableConf.primary))
+        return [...requested];
+    return requested.filter((op) => !SINGLE_PK_OPERATIONS.has(op));
+}
+/**
+ * Build the machine-readable description of every table exposed by this deployment:
+ * fields (type/required/nullable), enabled operations, join aliases, computed fields,
+ * extra filters, tenant scoping. Derived entirely from `DbTables`, so it is always in
+ * sync with the running configuration. Pairs with AGENTS_FRONTEND.md (the request grammar)
+ * to give an LLM client everything it needs to drive the API.
+ */
+export function buildAgentManifest(dbTables) {
+    const tables = {};
+    for (const [key, tableConf] of Object.entries(dbTables)) {
+        const schema = tableConf.Schema;
+        const required = new Set((schema.validation.required) ?? []);
+        const readExcluded = new Set(tableConf.readExclude ?? []);
+        const fields = {};
+        for (const [name, fieldSchema] of Object.entries(schema.fields)) {
+            const f = { type: shortType(fieldSchema) };
+            if (required.has(name))
+                f.required = true;
+            if (isNullable(fieldSchema))
+                f.nullable = true;
+            if (readExcluded.has(name))
+                f.writeOnly = true;
+            fields[name] = f;
+        }
+        const readJoins = (tableConf.allowedReadJoins ?? []).map((j) => ({
+            alias: j.alias,
+            table: j.joinSchema.tableName,
+            kind: j.unique ? 'N:1' : '1:N',
+        }));
+        const writeJoins = (tableConf.allowedWriteJoins ?? []).map((j) => ({
+            alias: j.alias,
+            table: j.joinSchema.tableName,
+            kind: j.unique ? 'N:1' : '1:N',
+        }));
+        const extraFilters = Object.keys(tableConf.extraFilters ?? {}).length
+            ? Object.fromEntries(Object.entries(tableConf.extraFilters).map(([n, s]) => [n, shortType(s)]))
+            : undefined;
+        const entry = {
+            table: schema.tableName,
+            primary: tableConf.primary,
+            operations: tableOperations(tableConf),
+            fields,
+        };
+        if (tableConf.excludeFromCreation?.length)
+            entry.serverGenerated = [...tableConf.excludeFromCreation];
+        const computed = computedTypes(tableConf);
+        if (computed)
+            entry.computed = computed;
+        if (extraFilters)
+            entry.extraFilters = extraFilters;
+        if (readJoins.length)
+            entry.readJoins = readJoins;
+        if (writeJoins.length)
+            entry.writeJoins = writeJoins;
+        if (tableConf.tenantScope)
+            entry.tenantScoped = true;
+        if (tableConf.defaultOrder)
+            entry.defaultOrder = tableConf.defaultOrder;
+        tables[key] = entry;
+    }
+    return { tables };
+}
+/**
+ * Compact markdown rendering of the manifest, designed for an LLM system prompt.
+ * Notation: `!` required on insert, `?` nullable, `(writeOnly)` never returned by reads.
+ */
+export function renderAgentManifestMd(manifest) {
+    const lines = [
+        '# Tables',
+        '',
+        'Notation: `!`=required on insert, `?`=nullable, `(writeOnly)`=writable, never in reads.',
+        'serverGenerated fields: omit on insert (values from client are ignored).',
+        'readJoins aliases: `1:N` → joinMustExist/joinMultiple/joinGroup; `N:1` → joinLeft.',
+        'writeJoins aliases: keys for `secondaries`/`deletions` in writes.',
+        '',
+    ];
+    for (const t of Object.values(manifest.tables)) {
+        const pk = Array.isArray(t.primary) ? t.primary.join('+') : t.primary;
+        const flags = t.tenantScoped ? '  [tenant-scoped]' : '';
+        lines.push(`## ${t.table}  PK:${pk}  ops:${t.operations.join(',')}${flags}`);
+        const fieldParts = Object.entries(t.fields).map(([name, f]) => {
+            let s = `${name}:${f.type}`;
+            if (f.required)
+                s += '!';
+            if (f.nullable)
+                s += '?';
+            if (f.writeOnly)
+                s += '(writeOnly)';
+            return s;
+        });
+        lines.push(`fields: ${fieldParts.join(', ')}`);
+        if (t.serverGenerated)
+            lines.push(`serverGenerated: ${t.serverGenerated.join(', ')}`);
+        if (t.computed) {
+            lines.push(`computed: ${Object.entries(t.computed).map(([n, ty]) => `${n}:${ty}`).join(', ')}`);
+        }
+        if (t.extraFilters) {
+            lines.push(`extraFilters: ${Object.entries(t.extraFilters).map(([n, ty]) => `${n}:${ty}`).join(', ')}`);
+        }
+        if (t.readJoins) {
+            lines.push(`readJoins: ${t.readJoins.map((j) => `${j.alias}→${j.table}(${j.kind})`).join(', ')}`);
+        }
+        if (t.writeJoins) {
+            lines.push(`writeJoins: ${t.writeJoins.map((j) => `${j.alias}→${j.table}`).join(', ')}`);
+        }
+        if (t.defaultOrder)
+            lines.push(`defaultOrder: ${t.defaultOrder}`);
+        lines.push('');
+    }
+    return lines.join('\n');
+}

package/dist/lib/agent/tool-schemas.d.ts

@@ -0,0 +1,36 @@
+import type { DbTables } from '../../types.js';
+export interface AgentToolSchemas {
+    /** POST /search/{table}: `body` + `querystring` (orderBy/page/itemsPerPage/compute*). */
+    search?: {
+        body: object;
+        querystring: object;
+    };
+    insert?: {
+        body: object;
+    };
+    update?: {
+        body: object;
+    };
+    bulkUpsert?: {
+        body: object;
+    };
+    bulkDelete?: {
+        body: object;
+    };
+}
+/**
+ * Ready-to-use JSON Schemas for exposing a table's operations as strict LLM tools —
+ * the same TypeBox schemas the HTTP routes validate with (TypeBox objects ARE plain
+ * JSON Schema). Only the operations actually enabled for the table are included
+ * (`operations` whitelist, composite-PK rules). `get` and `delete` take a single PK
+ * path param and need no schema.
+ *
+ * Strict tools trade prompt size for provider-side validation; the lighter
+ * alternative is a loose tool plus the plugin's structured 400 as the retry signal
+ * (see "LLM / agent clients" in the README).
+ */
+export declare function agentToolSchemas(dbTables: DbTables, tableName: string, opts?: {
+    maxItemsPerPage?: number;
+    maxBulkItems?: number;
+}): AgentToolSchemas;
+//# sourceMappingURL=tool-schemas.d.ts.map

package/dist/lib/agent/tool-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-schemas.d.ts","sourceRoot":"","sources":["../../../src/lib/agent/tool-schemas.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,WAAW,gBAAgB;IAC/B,yFAAyF;IACzF,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACzD,gBAAgB,CA6BlB"}

package/dist/lib/agent/tool-schemas.js

@@ -0,0 +1,47 @@
+import { SearchTableBodyPost, SearchTableQuery } from '../schema/search.js';
+import { InsertTableBody } from '../schema/insert.js';
+import { UpdateTableBody } from '../schema/update.js';
+import { BulkUpsertTableBody } from '../schema/bulk-upsert.js';
+import { BulkDeleteTableBody } from '../schema/bulk-delete.js';
+import { tableOperations } from './manifest.js';
+import { DEFAULT_MAX_ITEMS_PER_PAGE, DEFAULT_MAX_BULK_ITEMS } from '../../types.js';
+/**
+ * Ready-to-use JSON Schemas for exposing a table's operations as strict LLM tools —
+ * the same TypeBox schemas the HTTP routes validate with (TypeBox objects ARE plain
+ * JSON Schema). Only the operations actually enabled for the table are included
+ * (`operations` whitelist, composite-PK rules). `get` and `delete` take a single PK
+ * path param and need no schema.
+ *
+ * Strict tools trade prompt size for provider-side validation; the lighter
+ * alternative is a loose tool plus the plugin's structured 400 as the retry signal
+ * (see "LLM / agent clients" in the README).
+ */
+export function agentToolSchemas(dbTables, tableName, opts) {
+    const tableConf = dbTables[tableName];
+    if (!tableConf) {
+        throw new Error(`Unknown table "${tableName}". Available: ${Object.keys(dbTables).join(', ')}`);
+    }
+    const ops = new Set(tableOperations(tableConf));
+    const out = {};
+    if (ops.has('search')) {
+        out.search = {
+            body: SearchTableBodyPost(dbTables, tableName),
+            querystring: SearchTableQuery(opts?.maxItemsPerPage ?? DEFAULT_MAX_ITEMS_PER_PAGE),
+        };
+    }
+    if (ops.has('insert'))
+        out.insert = { body: InsertTableBody(dbTables, tableName) };
+    if (ops.has('update'))
+        out.update = { body: UpdateTableBody(dbTables, tableName) };
+    if (ops.has('bulkUpsert')) {
+        out.bulkUpsert = {
+            body: BulkUpsertTableBody(dbTables, tableName, opts?.maxBulkItems ?? DEFAULT_MAX_BULK_ITEMS),
+        };
+    }
+    if (ops.has('bulkDelete')) {
+        out.bulkDelete = {
+            body: BulkDeleteTableBody(dbTables, tableName, opts?.maxBulkItems ?? DEFAULT_MAX_BULK_ITEMS),
+        };
+    }
+    return out;
+}

package/dist/lib/cli/schema-codegen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-codegen.d.ts","sourceRoot":"","sources":["../../../src/lib/cli/schema-codegen.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE3D,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE;IAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9F,MAAM,CAqDR;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAqC1D;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GACjB,MAAM,CA4CR"}
+{"version":3,"file":"schema-codegen.d.ts","sourceRoot":"","sources":["../../../src/lib/cli/schema-codegen.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE3D,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE;IAAE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9F,MAAM,CA0DR;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,QAAQ,CAqC1D;AAED,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,GACjB,MAAM,CA8CR"}

package/dist/lib/cli/schema-codegen.js

@@ -4,6 +4,12 @@ export function convertColType(udtName, columnInfo) {
     const hasDefault = columnInfo.column_default || columnInfo.is_auto_increment;
     const isNullable = columnInfo.is_nullable === 'YES';
     const wrap = (t) => {
+        // Nullable columns need the type-array form (`Nullable(T)` → type: [..., 'null']):
+        // Type.Optional alone means "key may be absent", and serializing a NULL value against
+        // a plain type coerces it (0 / "" / false). A Type.Union with Null is no better —
+        // Ajv's coerceTypes corrupts null/0/"" through the union branches.
+        if (isNullable)
+            t = `Nullable(${t})`;
         return hasDefault || isNullable ? `Type.Optional(${t})` : t;
     };
     switch (udtName) {
@@ -83,8 +89,10 @@ export function generateSchemaFile(schemaName, tableName, fields, colMap, primar
     const fieldsStr = JSON.stringify(fields, null, 2).replace(/"(.*?)"\s*:\s*"Type(.*?)"/g, '$1: Type$2');
     const colMapStr = JSON.stringify(colMap, null, 2);
     const primaryKeyLine = primary?.length ? `\n  primaryKey: ${JSON.stringify(primary)},` : '';
+    const usesNullable = Object.values(fields).some((t) => t.includes('Nullable('));
+    const valueImports = usesNullable ? 'Type, Nullable' : 'Type';
     return `// Auto-generated by fastify-auto-sqlapi. Do not edit.
-import { Type } from "fastify-auto-sqlapi";
+import { ${valueImports} } from "fastify-auto-sqlapi";
 import type { Static } from "fastify-auto-sqlapi";
 
 const _Schema = ${fieldsStr};

package/dist/lib/engine/bulk/bulk-delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bulk-delete.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/bulk/bulk-delete.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAiE5F"}
+{"version":3,"file":"bulk-delete.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/bulk/bulk-delete.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAuE5F"}

package/dist/lib/engine/bulk/bulk-delete.js

@@ -1,8 +1,12 @@
 import { ConditionBuilder } from 'node-condition-builder';
 import { buildTenantDeleteWhere, assertTenantOwnsAll } from '../../tenant.js';
-import { primaryAsString } from '../../../types.js';
+import { primaryAsString, isCompositePrimary } from '../../../types.js';
+import { httpError } from '../../errors.js';
 export async function bulkDeleteEngine(params) {
     const { db, tableConf, ids, tenant, request } = params;
+    if (isCompositePrimary(tableConf.primary)) {
+        throw httpError(400, `Table "${tableConf.Schema.tableName}" has a composite primary key: bulk delete matches on "${primaryAsString(tableConf.primary)}" alone and could remove multiple rows per id. Use a custom query.`);
+    }
     if (!ids.length)
         return [];
     const pk = primaryAsString(tableConf.primary);

package/dist/lib/engine/rest/delete.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/rest/delete.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAY,MAAM,mBAAmB,CAAC;AAE9E,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAiC9E"}
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/rest/delete.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAY,MAAM,mBAAmB,CAAC;AAE9E,wBAAsB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAuC9E"}

package/dist/lib/engine/rest/delete.js

@@ -1,8 +1,11 @@
 import { buildTenantDeleteWhere, assertTenantOwnsAll } from '../../tenant.js';
 import { httpError } from '../../errors.js';
-import { primaryAsString } from '../../../types.js';
+import { primaryAsString, isCompositePrimary } from '../../../types.js';
 export async function deleteEngine(params) {
     const { db, tableConf, id, tenant, request } = params;
+    if (isCompositePrimary(tableConf.primary)) {
+        throw httpError(400, `Table "${tableConf.Schema.tableName}" has a composite primary key: delete-by-id would match on "${primaryAsString(tableConf.primary)}" alone and could remove multiple rows. Use a custom query.`);
+    }
     const pk = primaryAsString(tableConf.primary);
     const pkCol = tableConf.Schema.col(pk);
     const tableName = tableConf.Schema.tableName;

package/dist/lib/engine/rest/get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/rest/get.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAuB,MAAM,mBAAmB,CAAC;AAEnF,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAgCrE"}
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/lib/engine/rest/get.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAuB,MAAM,mBAAmB,CAAC;AAEnF,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAsCrE"}

package/dist/lib/engine/rest/get.js

@@ -3,9 +3,12 @@ import { camelcaseObject } from '../../naming.js';
 import { buildTenantCondition, buildTenantJoin } from '../../tenant.js';
 import { httpError } from '../../errors.js';
 import { readableSelectColumns } from '../../read-access.js';
-import { primaryAsString } from '../../../types.js';
+import { primaryAsString, isCompositePrimary } from '../../../types.js';
 export async function getEngine(params) {
     const { db, tableConf, id, tenant } = params;
+    if (isCompositePrimary(tableConf.primary)) {
+        throw httpError(400, `Table "${tableConf.Schema.tableName}" has a composite primary key: get-by-id would match on "${primaryAsString(tableConf.primary)}" alone. Use search with all PK fields.`);
+    }
     const pkCol = tableConf.Schema.col(primaryAsString(tableConf.primary));
     const cb = new ConditionBuilder('AND', db.cbDialect);
     // Table-qualified: the tenant scope may add a through-join, and a bare PK column

package/dist/lib/engine/write-helpers.d.ts

@@ -2,7 +2,20 @@ import type { FastifyRequest } from 'fastify';
 import type { QueryClient } from '../db.js';
 import type { ITable, DbTables, JoinDefinition } from '../../types.js';
 export declare function findWriteJoin(tableConf: ITable, alias: string): JoinDefinition | undefined;
+/**
+ * Drop `excludeFromCreation` columns from a snake_case (DB-format) record.
+ *
+ * Exclusion is a whitelist on CLIENT input: call this on the client payload only,
+ * BEFORE any server-side value is assigned (beforeInsert mutations, FK auto-fill),
+ * so engine/hook-generated values on those fields reach the SQL.
+ */
 export declare function removeExcludedFields(record: Record<string, unknown>, tableConf: ITable): Record<string, unknown>;
+/**
+ * Same whitelist as `removeExcludedFields`, but for a camelCase record (schema
+ * field names) and in place. Used on the client payload before the beforeInsert
+ * hook runs.
+ */
+export declare function removeExcludedFieldsCamel(record: Record<string, unknown>, tableConf: ITable): void;
 export declare function findSecondaryTableConf(dbTables: DbTables, joinTableName: string): ITable | undefined;
 interface PrepareCtx {
     db: QueryClient;
@@ -12,10 +25,11 @@ interface PrepareCtx {
 /**
  * Prepare a single record for INSERT/UPSERT:
  *   1. shallow camelCase copy of `input`
- *   2. runValidation (camelCase)
- *   3. beforeInsert hook (caller can mutate the camelCase copy)
- *   4. snakecaseRecord → DB format
- *   5. removeExcludedFields
+ *   2. runValidation (camelCase — sees the client payload as sent)
+ *   3. drop excludeFromCreation fields (client-input whitelist; applied BEFORE the
+ *      hook so values it assigns — e.g. a server-generated id — reach the INSERT)
+ *   4. beforeInsert hook (caller can mutate the camelCase copy)
+ *   5. snakecaseRecord → DB format
  *
  * Returns both `camel` (input + hook mutations, used for FK auto-fill / afterInsert) and
  * `snake` (DB-ready record). The original `input` is left intact.

package/dist/lib/engine/write-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write-helpers.d.ts","sourceRoot":"","sources":["../../../src/lib/engine/write-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,KAAK,EACV,MAAM,EACN,QAAQ,EACR,cAAc,EAEf,MAAM,gBAAgB,CAAC;AAExB,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,cAAc,GAAG,SAAS,CAE5B;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,MAAM,GACpB,MAAM,GAAG,SAAS,CAKpB;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,WAAW,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACzB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EACvD,OAAO,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GACnC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAe7E;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,GACrD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CA2DpD;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,GACnD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CA+BpD"}
+{"version":3,"file":"write-helpers.d.ts","sourceRoot":"","sources":["../../../src/lib/engine/write-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,KAAK,EACV,MAAM,EACN,QAAQ,EACR,cAAc,EAEf,MAAM,gBAAgB,CAAC;AAExB,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,cAAc,GAAG,SAAS,CAE5B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,MAAM,GAChB,IAAI,CAKN;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,QAAQ,EAClB,aAAa,EAAE,MAAM,GACpB,MAAM,GAAG,SAAS,CAKpB;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,WAAW,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,CAAC;CACzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,EACvD,OAAO,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GACnC,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAe7E;AAED,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,GACrD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CA4DpD;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,GACnD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CA+BpD"}

package/dist/lib/engine/write-helpers.js

@@ -3,6 +3,13 @@ import { runValidation } from './validate.js';
 export function findWriteJoin(tableConf, alias) {
     return tableConf.allowedWriteJoins?.find((j) => j.alias === alias);
 }
+/**
+ * Drop `excludeFromCreation` columns from a snake_case (DB-format) record.
+ *
+ * Exclusion is a whitelist on CLIENT input: call this on the client payload only,
+ * BEFORE any server-side value is assigned (beforeInsert mutations, FK auto-fill),
+ * so engine/hook-generated values on those fields reach the SQL.
+ */
 export function removeExcludedFields(record, tableConf) {
     if (!tableConf.excludeFromCreation?.length)
         return record;
@@ -13,6 +20,18 @@ export function removeExcludedFields(record, tableConf) {
     }
     return result;
 }
+/**
+ * Same whitelist as `removeExcludedFields`, but for a camelCase record (schema
+ * field names) and in place. Used on the client payload before the beforeInsert
+ * hook runs.
+ */
+export function removeExcludedFieldsCamel(record, tableConf) {
+    if (!tableConf.excludeFromCreation?.length)
+        return;
+    for (const field of tableConf.excludeFromCreation) {
+        delete record[field];
+    }
+}
 export function findSecondaryTableConf(dbTables, joinTableName) {
     for (const [, conf] of Object.entries(dbTables)) {
         if (conf.Schema.tableName === joinTableName)
@@ -23,10 +42,11 @@ export function findSecondaryTableConf(dbTables, joinTableName) {
 /**
  * Prepare a single record for INSERT/UPSERT:
  *   1. shallow camelCase copy of `input`
- *   2. runValidation (camelCase)
- *   3. beforeInsert hook (caller can mutate the camelCase copy)
- *   4. snakecaseRecord → DB format
- *   5. removeExcludedFields
+ *   2. runValidation (camelCase — sees the client payload as sent)
+ *   3. drop excludeFromCreation fields (client-input whitelist; applied BEFORE the
+ *      hook so values it assigns — e.g. a server-generated id — reach the INSERT)
+ *   4. beforeInsert hook (caller can mutate the camelCase copy)
+ *   5. snakecaseRecord → DB format
  *
  * Returns both `camel` (input + hook mutations, used for FK auto-fill / afterInsert) and
  * `snake` (DB-ready record). The original `input` is left intact.
@@ -39,11 +59,11 @@ export async function prepareInsertRecord(ctx, input, secondaries, options) {
     if (!options?.skipValidate) {
         await runValidation(ctx.db, ctx.request, ctx.tableConf, camel, secondaries);
     }
+    removeExcludedFieldsCamel(camel, ctx.tableConf);
     if (ctx.tableConf.beforeInsert) {
         await ctx.tableConf.beforeInsert(ctx.db, ctx.request, camel);
     }
-    let snake = snakecaseRecord(camel, ctx.tableConf.Schema);
-    snake = removeExcludedFields(snake, ctx.tableConf);
+    const snake = snakecaseRecord(camel, ctx.tableConf.Schema);
     return { camel, snake };
 }
 export async function processSecondaries(db, tableConf, dbTables, mainRecord, secondaries) {
@@ -63,15 +83,16 @@ export async function processSecondaries(db, tableConf, dbTables, mainRecord, se
             : joinSchema.col(secondaryPk);
         const preparedRecords = records.map((rec) => {
             let prepared = snakecaseRecord(rec, joinSchema);
+            // Remove excluded fields from the client payload BEFORE the FK auto-fill:
+            // an excluded FK column must not strip the engine-injected value below.
+            if (secondaryTableConf) {
+                prepared = removeExcludedFields(prepared, secondaryTableConf);
+            }
             // Auto-fill FK from main record
             const mainValue = Array.isArray(mainField)
                 ? mainRecord[mainField[0]]
                 : mainRecord[mainField];
             prepared[joinCol] = mainValue;
-            // Remove excluded fields
-            if (secondaryTableConf) {
-                prepared = removeExcludedFields(prepared, secondaryTableConf);
-            }
             return prepared;
         });
         const secondaryUpsertKeys = tableConf.upsertMap?.get(joinSchema);

package/dist/lib/nullable.d.ts

@@ -0,0 +1,17 @@
+import { type Static, type TSchema, type TUnsafe } from '@sinclair/typebox';
+/**
+ * Mark a schema as nullable using the JSON-Schema type-array form
+ * (`{ type: ['integer', 'null'] }`).
+ *
+ * This is the only representation that behaves correctly under Fastify's default Ajv
+ * `coerceTypes`: with `Type.Union([T, Type.Null()])` a null body value is coerced by the
+ * first branch to 0/""/false — and with the Null branch first, a legitimate 0/""/false is
+ * coerced to null. With a type array no coercion happens when the value already matches
+ * one of the listed types. fast-json-stringify also serializes NULL correctly against a
+ * type array, while a bare `Type.Optional(T)` coerces NULL to the type's zero value.
+ *
+ * Schemas without a `type` keyword (e.g. `Type.Any()`) already admit null and are
+ * returned unchanged.
+ */
+export declare function Nullable<T extends TSchema>(schema: T): TUnsafe<Static<T> | null>;
+//# sourceMappingURL=nullable.d.ts.map

package/dist/lib/nullable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nullable.d.ts","sourceRoot":"","sources":["../../src/lib/nullable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,EAAE,KAAK,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAElF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,CAAC,SAAS,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAMhF"}

package/dist/lib/nullable.js

@@ -0,0 +1,24 @@
+import { Type } from '@sinclair/typebox';
+/**
+ * Mark a schema as nullable using the JSON-Schema type-array form
+ * (`{ type: ['integer', 'null'] }`).
+ *
+ * This is the only representation that behaves correctly under Fastify's default Ajv
+ * `coerceTypes`: with `Type.Union([T, Type.Null()])` a null body value is coerced by the
+ * first branch to 0/""/false — and with the Null branch first, a legitimate 0/""/false is
+ * coerced to null. With a type array no coercion happens when the value already matches
+ * one of the listed types. fast-json-stringify also serializes NULL correctly against a
+ * type array, while a bare `Type.Optional(T)` coerces NULL to the type's zero value.
+ *
+ * Schemas without a `type` keyword (e.g. `Type.Any()`) already admit null and are
+ * returned unchanged.
+ */
+export function Nullable(schema) {
+    const type = schema.type;
+    if (!type)
+        return schema;
+    const types = Array.isArray(type) ? type : [type];
+    if (types.includes('null'))
+        return schema;
+    return Type.Unsafe({ ...schema, type: [...types, 'null'] });
+}

package/dist/lib/schema/search.d.ts

@@ -1,14 +1,16 @@
 import { type TObject } from '@sinclair/typebox';
 import type { DbTables } from '../../types.js';
 export declare function SearchTableBodyPost(dbTables: DbTables, tableName: string): TObject;
-export declare const SearchTableQueryString: TObject<{
-    orderBy: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    page: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
-    itemsPerPage: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
-    computeMin: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    computeMax: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    computeSum: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    computeAvg: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-}>;
+/**
+ * Querystring schema, parameterized on the plugin's `maxItemsPerPage`.
+ *
+ * The `itemsPerPage` default MUST NOT exceed the cap: Ajv injects the default before any
+ * runtime check runs, so a fixed default of 500 combined with `maxItemsPerPage: 100` would
+ * make every request without an explicit `itemsPerPage` fail with 400. The default is
+ * therefore `min(500, cap)` and the cap doubles as the schema `maximum` (structured 400).
+ */
+export declare function SearchTableQuery(maxItemsPerPage?: number): TObject;
+/** Default-cap variant, kept for granular composition and backward compatibility. */
+export declare const SearchTableQueryString: TObject<import("@sinclair/typebox").TProperties>;
 export declare function SearchTableResponse(dbTables: DbTables, tableName: string): TObject;
 //# sourceMappingURL=search.d.ts.map

package/dist/lib/schema/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/lib/schema/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAGrE,OAAO,KAAK,EAAE,QAAQ,EAA4B,MAAM,gBAAgB,CAAC;AAyBzE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAuHlF;AAED,eAAO,MAAM,sBAAsB;;;;;;;;EASjC,CAAC;AAEH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAsElF"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../../src/lib/schema/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,OAAO,EAAgB,MAAM,mBAAmB,CAAC;AAIrE,OAAO,KAAK,EAAE,QAAQ,EAA4B,MAAM,gBAAgB,CAAC;AAyBzE,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAuHlF;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,GAAE,MAAmC,GAAG,OAAO,CAe9F;AAED,qFAAqF;AACrF,eAAO,MAAM,sBAAsB,kDAAqB,CAAC;AAEzD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAsElF"}

package/dist/lib/schema/search.js

@@ -1,6 +1,7 @@
 import { Type } from '@sinclair/typebox';
 import { ALLOWED_METHODS } from '../condition-methods.js';
 import { readableFieldNames } from '../read-access.js';
+import { DEFAULT_MAX_ITEMS_PER_PAGE } from '../../types.js';
 /** Schema fields minus the ones hidden by `readExclude`. */
 function readableFields(schema, tableConf) {
     if (!tableConf?.readExclude?.length)
@@ -131,16 +132,32 @@ export function SearchTableBodyPost(dbTables, tableName) {
     }
     return Type.Object(bodyProperties);
 }
-export const SearchTableQueryString = Type.Object({
-    orderBy: Type.Optional(Type.String()),
-    page: Type.Optional(Type.Integer({ minimum: 1 })),
-    itemsPerPage: Type.Optional(Type.Integer({ minimum: 1, default: 500 })),
-    computeMin: Type.Optional(Type.String()),
-    computeMax: Type.Optional(Type.String()),
-    computeSum: Type.Optional(Type.String()),
-    computeAvg: Type.Optional(Type.String()),
-    // selectComputed list goes in the body (POST), not querystring — see SearchTableBodyPost.
-});
+/**
+ * Querystring schema, parameterized on the plugin's `maxItemsPerPage`.
+ *
+ * The `itemsPerPage` default MUST NOT exceed the cap: Ajv injects the default before any
+ * runtime check runs, so a fixed default of 500 combined with `maxItemsPerPage: 100` would
+ * make every request without an explicit `itemsPerPage` fail with 400. The default is
+ * therefore `min(500, cap)` and the cap doubles as the schema `maximum` (structured 400).
+ */
+export function SearchTableQuery(maxItemsPerPage = DEFAULT_MAX_ITEMS_PER_PAGE) {
+    return Type.Object({
+        orderBy: Type.Optional(Type.String()),
+        page: Type.Optional(Type.Integer({ minimum: 1 })),
+        itemsPerPage: Type.Optional(Type.Integer({
+            minimum: 1,
+            maximum: maxItemsPerPage,
+            default: Math.min(500, maxItemsPerPage),
+        })),
+        computeMin: Type.Optional(Type.String()),
+        computeMax: Type.Optional(Type.String()),
+        computeSum: Type.Optional(Type.String()),
+        computeAvg: Type.Optional(Type.String()),
+        // selectComputed list goes in the body (POST), not querystring — see SearchTableBodyPost.
+    });
+}
+/** Default-cap variant, kept for granular composition and backward compatibility. */
+export const SearchTableQueryString = SearchTableQuery();
 export function SearchTableResponse(dbTables, tableName) {
     const tableConf = dbTables[tableName];
     // Computed fields are present in main rows only when explicitly listed in

package/dist/lib/table-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CA8BhG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAMX;AAkED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAShB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}
+{"version":3,"file":"table-helpers.d.ts","sourceRoot":"","sources":["../../src/lib/table-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,yBAAyB,EAAiC,MAAM,wBAAwB,CAAC;AACzH,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,MAAM,EACP,MAAM,aAAa,CAAC;AAarB,KAAK,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExH,wBAAgB,eAAe,CAC7B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,SAAS,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAErE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,YAAY,GAAE,EAAa,EAC3B,iBAAiB,CAAC,EAAE,CAClB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;CAAE,KAC3E,IAAI,GACR;IAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAsChG;AAED,wBAAgB,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3D,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAChB,MAAM,CAAC,CAAC,CAAC,CAMX;AAkED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,aAAa,CAC3B,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEjC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,EAClD,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,EAC3B,OAAO,CAAC,EAAE,oBAAoB,GAC7B,cAAc,CAShB;AAED,wBAAgB,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/D,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,GAC5B,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAE9B;AAED,wBAAgB,gBAAgB,CAC9B,GAAG,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE,GACvC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAEjC"}

package/dist/lib/table-helpers.js

@@ -17,8 +17,18 @@ export function exportTableInfo(Schema, extraFilters = {}, extendedCondition) {
         // qualifier (a subquery alias) takes precedence over the table name.
         const table = qi(qualifier ?? Schema.tableName, dialect);
         for (const field of Object.keys(Schema.fields)) {
-            if (field in filterValues && filterValues[field] !== null && filterValues[field] !== undefined) {
-                condition.isEqual(`${table}.${qi(Schema.col(field), dialect)}`, filterValues[field]);
+            if (!(field in filterValues) || filterValues[field] === undefined)
+                continue;
+            const col = `${table}.${qi(Schema.col(field), dialect)}`;
+            // An explicit null filters by IS NULL: equality with NULL never matches, and
+            // silently dropping the filter would return unfiltered results for a request
+            // that asked for "field is null".
+            if (filterValues[field] === null) {
+                // Second arg is CB's enable-guard: without `true` the call is a no-op.
+                condition.isNull(col, true);
+            }
+            else {
+                condition.isEqual(col, filterValues[field]);
             }
         }
         // extraFilters are handled exclusively by extendedCondition