fastify-auto-sqlapi 0.2.1 → 0.2.3

package/dist/lib/tenant.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../src/lib/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EAEV,MAAM,EACN,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACd,MAAM,aAAa,CAAC;AAwCrB,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAWpC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,MAAM,GACf,gBAAgB,CAgBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,aAAa,GAAG,SAAS,CAI3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,QAAQ,EAAE,MAAM,GACf,gBAAgB,GAAG,SAAS,CAoB9B;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,MAAM,GACpB,MAAM,CAMR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAYN;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,iBAAiB,GAAG,mBAAmB,EAC9C,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAiBN;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,OAAO,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,GAAG,cAAc,EAAE,EACrD,MAAM,EAAE,aAAa,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAwBtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CA4Ef;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,GACjB,IAAI,CAGN;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,EAAE,CAGlF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,GAChC,gBAAgB,GAAG,SAAS,CAU9B;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EACxB,OAAO,EAAE,cAAc,GAAG,cAAc,EAAE,GACzC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,cAAc,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAiBf"}
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../../src/lib/tenant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAE/G,OAAO,KAAK,EAEV,MAAM,EACN,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACd,MAAM,aAAa,CAAC;AAwCrB,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAWpC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,MAAM,GACf,gBAAgB,CAgBlB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,aAAa,GAAG,SAAS,CAI3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,QAAQ,EAAE,MAAM,GACf,gBAAgB,GAAG,SAAS,CAoB9B;AAED,wBAAgB,eAAe,CAC7B,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,MAAM,GACpB,MAAM,CAMR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAYN;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,iBAAiB,GAAG,mBAAmB,EAC9C,SAAS,EAAE,QAAQ,EAAE,GACpB,IAAI,CAiBN;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,EAAE,EAAE,WAAW,EACf,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,QAAQ,EAAE,EACrB,QAAQ,EAAE,OAAO,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,yBAAyB,GAAG,cAAc,EAAE,EACrD,MAAM,EAAE,aAAa,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAwBtC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EAAE,EACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAkFf;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,WAAW,GACjB,IAAI,CAGN;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GACjC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,EAAE,CAGlF;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,GAChC,gBAAgB,GAAG,SAAS,CAU9B;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EACxB,OAAO,EAAE,cAAc,GAAG,cAAc,EAAE,GACzC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,cAAc,EAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CAiBf"}

package/dist/lib/tenant.js

@@ -283,10 +283,16 @@ export async function assertTenantOwnsConflicts(db, tenant, tableName, conflictC
     };
     let mismatchSql;
     if (tenantCols.length === 1) {
-        mismatchSql = `${tenantCols[0]} NOT IN (${tenant.ids.map((id) => {
+        const col = tenantCols[0];
+        const notIn = `${col} NOT IN (${tenant.ids.map((id) => {
             values.push(id);
             return db.ph(values.length);
         }).join(', ')})`;
+        // A NULL owner makes `col NOT IN (...)` return NULL, not TRUE, so an unowned row would slip
+        // past the probe and be claimable/overwritten by the upsert. Treat NULL as "not mine" — the
+        // same way the multi-column branch (NOT COALESCE(..., FALSE)) and the read side already do —
+        // so a NULL-owner conflict row is flagged as foreign.
+        mismatchSql = `(${col} IS NULL OR ${notIn})`;
     }
     else {
         // A NULL party makes `IN` return NULL, and `NOT NULL` is not TRUE — a plain negation would

package/dist/lib/write-access.d.ts

@@ -0,0 +1,36 @@
+import type { TSchema } from '@sinclair/typebox';
+import type { ITable, SchemaDefinition } from '../types.js';
+/**
+ * Write visibility — the counterpart of `read-access.ts`.
+ *
+ * A field is excluded from writes for one of two reasons:
+ *
+ *  - the database computes it (`GENERATED ALWAYS AS (<expr>)`), which the generated Schema
+ *    publishes in `generatedFields`. Naming such a column in an INSERT or an UPDATE is an
+ *    error on both engines, whoever put the value there, so this exclusion is a fact about
+ *    the column rather than a decision about the caller;
+ *  - the table config lists it in `writeExclude`, for a column the deployment keeps read-only
+ *    for reasons of its own.
+ *
+ * Excluded fields are removed from the write body schemas — so an HTTP caller gets a 400 from
+ * `additionalProperties: false` rather than a driver error — and dropped again in the engines,
+ * which `sqlApi.*` reaches without passing through those schemas.
+ *
+ * This is not `excludeFromCreation`, which whitelists CLIENT input on insert only and lets a
+ * hook assign the field afterwards (ADR 0005); nor is it the place for per-caller field rules,
+ * which stay in `beforeUpdate` / `validate` (ADR 0011).
+ */
+export declare function writeExcludedFields(tableConf: ITable | undefined, schema: SchemaDefinition | undefined): Set<string>;
+/**
+ * A field map minus everything that may not be written. Used to build the write body schemas,
+ * where the removal is what turns a rejected column into a 400 instead of a 500.
+ */
+export declare function writableFields(fields: Record<string, TSchema>, tableConf: ITable | undefined, schema: SchemaDefinition | undefined): Record<string, TSchema>;
+/**
+ * Drop the non-writable fields from a camelCase record, in place.
+ *
+ * Call this AFTER the write hooks, unlike `excludeFromCreation`: a hook cannot be allowed to
+ * put back a value the database will refuse, so the last word has to belong to the exclusion.
+ */
+export declare function removeWriteExcluded(record: Record<string, unknown>, tableConf: ITable | undefined, schema: SchemaDefinition | undefined): void;
+//# sourceMappingURL=write-access.d.ts.map

package/dist/lib/write-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-access.d.ts","sourceRoot":"","sources":["../../src/lib/write-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,GAAG,CAAC,MAAM,CAAC,CAIb;AAUD;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,MAAM,EAAE,gBAAgB,GAAG,SAAS,GACnC,IAAI,CAKN"}

package/dist/lib/write-access.js

@@ -0,0 +1,58 @@
+/**
+ * Write visibility — the counterpart of `read-access.ts`.
+ *
+ * A field is excluded from writes for one of two reasons:
+ *
+ *  - the database computes it (`GENERATED ALWAYS AS (<expr>)`), which the generated Schema
+ *    publishes in `generatedFields`. Naming such a column in an INSERT or an UPDATE is an
+ *    error on both engines, whoever put the value there, so this exclusion is a fact about
+ *    the column rather than a decision about the caller;
+ *  - the table config lists it in `writeExclude`, for a column the deployment keeps read-only
+ *    for reasons of its own.
+ *
+ * Excluded fields are removed from the write body schemas — so an HTTP caller gets a 400 from
+ * `additionalProperties: false` rather than a driver error — and dropped again in the engines,
+ * which `sqlApi.*` reaches without passing through those schemas.
+ *
+ * This is not `excludeFromCreation`, which whitelists CLIENT input on insert only and lets a
+ * hook assign the field afterwards (ADR 0005); nor is it the place for per-caller field rules,
+ * which stay in `beforeUpdate` / `validate` (ADR 0011).
+ */
+export function writeExcludedFields(tableConf, schema) {
+    const excluded = new Set(schema?.generatedFields ?? []);
+    for (const field of tableConf?.writeExclude ?? [])
+        excluded.add(field);
+    return excluded;
+}
+/** True when the table has nothing to exclude — lets callers keep their existing object. */
+function hasWriteExclusions(tableConf, schema) {
+    return (schema?.generatedFields?.length ?? 0) > 0 || (tableConf?.writeExclude?.length ?? 0) > 0;
+}
+/**
+ * A field map minus everything that may not be written. Used to build the write body schemas,
+ * where the removal is what turns a rejected column into a 400 instead of a 500.
+ */
+export function writableFields(fields, tableConf, schema) {
+    if (!hasWriteExclusions(tableConf, schema))
+        return fields;
+    const excluded = writeExcludedFields(tableConf, schema);
+    const result = {};
+    for (const [name, value] of Object.entries(fields)) {
+        if (!excluded.has(name))
+            result[name] = value;
+    }
+    return result;
+}
+/**
+ * Drop the non-writable fields from a camelCase record, in place.
+ *
+ * Call this AFTER the write hooks, unlike `excludeFromCreation`: a hook cannot be allowed to
+ * put back a value the database will refuse, so the last word has to belong to the exclusion.
+ */
+export function removeWriteExcluded(record, tableConf, schema) {
+    if (!hasWriteExclusions(tableConf, schema))
+        return;
+    for (const field of writeExcludedFields(tableConf, schema)) {
+        delete record[field];
+    }
+}

package/dist/routes/auto/get.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/get.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,SAAS,CACrC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAkBf"}
+{"version":3,"file":"get.routes.d.ts","sourceRoot":"","sources":["../../../src/routes/auto/get.routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,wBAA8B,SAAS,CACrC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/routes/auto/get.routes.js

@@ -1,4 +1,5 @@
 import { Type } from '@sinclair/typebox';
+import { GetTableResponse } from '../../lib/schema/get.js';
 import { registerForAllTables } from './route-helpers.js';
 export default async function getRoutes(fastify, options) {
     await registerForAllTables(fastify, options, {
@@ -7,9 +8,9 @@ export default async function getRoutes(fastify, options) {
         method: 'GET',
         url: (tc) => `/rest/${tc.Schema.tableName}/:id`,
         successStatus: 200,
-        schemas: (_db, _table, tc) => ({
+        schemas: (db, table) => ({
             params: Type.Object({ id: Type.String() }),
-            response: Type.Object({ main: Type.Partial(Type.Object(tc.Schema.fields)) }),
+            response: GetTableResponse(db, table),
         }),
         summary: 'Get',
         description: (name) => `Get a record from ${name} by primary key`,

package/dist/routes/auto/plugin.js

@@ -1,8 +1,8 @@
 import fp from 'fastify-plugin';
 import { ConditionBuilder } from 'node-condition-builder';
 import { getDialect } from '../../lib/dialect.js';
-import { ensureSqlApiDecorator } from '../../lib/sql-api-decorator.js';
-import { setupSwagger } from '../../lib/setup-swagger.js';
+import { ensureSqlApiDecorator } from '../sql-api-decorator.js';
+import { setupSwagger } from '../setup-swagger.js';
 import searchRoutes from './search.routes.js';
 import getRoutes from './get.routes.js';
 import insertRoutes from './insert.routes.js';

package/dist/routes/auto/route-helpers.js

@@ -1,4 +1,4 @@
-import { ensureSqlApiDecorator } from '../../lib/sql-api-decorator.js';
+import { ensureSqlApiDecorator } from '../sql-api-decorator.js';
 import { sanitizeRouteError } from '../../lib/errors.js';
 import { isCompositePrimary } from '../../types.js';
 function mergeOnRequests(options, tableConf) {

package/dist/routes/setup-swagger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-swagger.d.ts","sourceRoot":"","sources":["../../src/routes/setup-swagger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAkB,MAAM,aAAa,CAAC;AAEvE,wBAAsB,YAAY,CAChC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,GAC5C,OAAO,CAAC,IAAI,CAAC,CA6Bf"}

package/dist/{lib → routes}/sql-api-decorator.d.ts

@@ -1,5 +1,5 @@
 import type { FastifyInstance } from 'fastify';
-import { type SqlApi } from './sql-api.js';
+import { type SqlApi } from '../lib/sql-api.js';
 import type { SqlApiPluginOptions } from '../types.js';
 declare module 'fastify' {
     interface FastifyInstance {

package/dist/routes/sql-api-decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-api-decorator.d.ts","sourceRoot":"","sources":["../../src/routes/sql-api-decorator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,MAAM,EAAE,MAAM,CAAC;KAChB;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,mBAAmB,GAC3B,IAAI,CA2BN"}

package/dist/{lib → routes}/sql-api-decorator.js

@@ -1,7 +1,7 @@
-import { createQueryClient } from './db.js';
-import { pgQueryable } from './adapters/pg-adapter.js';
-import { mysqlQueryable } from './adapters/mysql-adapter.js';
-import { createSqlApi } from './sql-api.js';
+import { createQueryClient } from '../lib/db.js';
+import { pgQueryable } from '../lib/adapters/pg-adapter.js';
+import { mysqlQueryable } from '../lib/adapters/mysql-adapter.js';
+import { createSqlApi } from '../lib/sql-api.js';
 /**
  * Decorates `fastify.sqlApi` (lazy getter) on the given instance unless the
  * decorator is already present in scope. The main plugin calls this at the

package/dist/types/cli.d.ts

@@ -19,8 +19,30 @@ export interface ColumnInfo {
     is_nullable: string;
     /** True when the column is part of the table's PRIMARY KEY (from information_schema). */
     is_primary?: boolean;
-    /** True for auto-generated columns without a visible default (mysql AUTO_INCREMENT). */
+    /**
+     * True for columns the database fills in by itself without a visible `column_default`:
+     * MySQL `AUTO_INCREMENT` and PostgreSQL `GENERATED ... AS IDENTITY`. Both behave like a
+     * default — omit the column and the value appears — so the generated field is Optional and
+     * the CLI lists it under `excludeFromCreation`.
+     */
     is_auto_increment?: boolean;
+    /**
+     * True for a column computed from an expression: `GENERATED ALWAYS AS (<expr>)`, STORED on
+     * PostgreSQL, VIRTUAL or STORED on MySQL. Unlike an identity column this one is never
+     * writable at all — naming it in an INSERT or an UPDATE is an error on both engines — so it
+     * is read-only for the whole API, not just at creation time.
+     */
+    is_generated?: boolean;
+    /**
+     * True when the relation is a view rather than a base table — `information_schema.tables`
+     * on both engines, plus `pg_class.relkind = 'm'` for PostgreSQL materialized views, which
+     * `information_schema` does not describe at all.
+     *
+     * A view is still a table config: what changes is what may be assumed about it. It carries
+     * no PRIMARY KEY constraint, so `is_primary` is false on every column, and only a view
+     * simple enough for the engine to make updatable accepts a write.
+     */
+    is_view?: boolean;
 }
 export interface TableMap {
     [schemaName: string]: {
@@ -29,6 +51,10 @@ export interface TableMap {
         colMap: Record<string, string>;
         /** PRIMARY KEY fields (camelCase), in table column order. Empty when unknown. */
         primary: string[];
+        /** Database-computed fields (camelCase), in table column order. Never writable. */
+        generated: string[];
+        /** True when this relation is a view (or a materialized view), not a base table. */
+        isView: boolean;
     };
 }
 //# sourceMappingURL=cli.d.ts.map

package/dist/types/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/types/cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wFAAwF;IACxF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,UAAU,EAAE,MAAM,GAAG;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,iFAAiF;QACjF,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;CACH"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/types/cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,yFAAyF;IACzF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,UAAU,EAAE,MAAM,GAAG;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,iFAAiF;QACjF,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,mFAAmF;QACnF,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,oFAAoF;QACpF,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;CACH"}

package/dist/types/dml.d.ts

@@ -1,4 +1,4 @@
-import type { FastifyRequest } from 'fastify';
+import type { ApiRequest } from './request.js';
 import type { QueryClient } from '../lib/db.js';
 import type { ITable, DbTables } from './table.js';
 import type { TenantContext } from './tenant.js';
@@ -9,7 +9,7 @@ interface DmlBaseParams {
 }
 interface DmlWriteBaseParams extends DmlBaseParams {
     dbTables: DbTables;
-    request: FastifyRequest;
+    request: ApiRequest;
 }
 export interface InsertParams extends DmlWriteBaseParams {
     record: Record<string, unknown>;
@@ -31,13 +31,15 @@ export interface UpdateResult {
 }
 export interface GetParams extends DmlBaseParams {
     id: string | number;
+    /** Handed to the `afterRead` hook; absent for a programmatic caller that did not pass one. */
+    request?: ApiRequest;
 }
 export interface GetResult {
     main: Record<string, unknown>;
 }
 export interface DeleteParams extends DmlBaseParams {
     id: string | number;
-    request?: FastifyRequest;
+    request?: ApiRequest;
 }
 export interface DeleteResult {
     main: Record<string, unknown>;
@@ -57,7 +59,7 @@ export interface BulkUpsertResult {
 }
 export interface BulkDeleteParams extends DmlBaseParams {
     ids: (string | number)[];
-    request?: FastifyRequest;
+    request?: ApiRequest;
 }
 export interface BulkDeleteResult {
     main: Record<string, unknown>;

package/dist/types/dml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dml.d.ts","sourceRoot":"","sources":["../../src/types/dml.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,UAAU,aAAa;IACrB,EAAE,EAAE,WAAW,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,UAAU,kBAAmB,SAAQ,aAAa;IAChD,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,cAAc,CAAC;CACzB;AAID,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACzD;AAID,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAID,MAAM,WAAW,SAAU,SAAQ,aAAa;IAC9C,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAID,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAID,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAID,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B"}
+{"version":3,"file":"dml.d.ts","sourceRoot":"","sources":["../../src/types/dml.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,UAAU,aAAa;IACrB,EAAE,EAAE,WAAW,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,UAAU,kBAAmB,SAAQ,aAAa;IAChD,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,UAAU,CAAC;CACrB;AAID,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACzD;AAID,MAAM,WAAW,YAAa,SAAQ,kBAAkB;IACtD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAID,MAAM,WAAW,SAAU,SAAQ,aAAa;IAC9C,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAID,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAID,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;CACvD;AAID,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,GAAG,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B"}

package/dist/types/plugin.d.ts

@@ -1,4 +1,4 @@
-import type { FastifyRequest, FastifyReply } from 'fastify';
+import type { ApiRequest, ApiReply } from './request.js';
 import type { DialectName } from '../lib/dialect.js';
 import type { DbTables } from './table.js';
 import type { TenantId } from './tenant.js';
@@ -10,11 +10,32 @@ export interface SwaggerOptions {
 }
 export interface SqlApiPluginOptions {
     DbTables: DbTables;
-    onRequests?: ((request: FastifyRequest, reply: FastifyReply) => Promise<void | FastifyReply>)[];
+    onRequests?: ((request: ApiRequest, reply: ApiReply) => Promise<void | ApiReply>)[];
     prefix?: string;
     swagger?: boolean | SwaggerOptions;
     dialect?: DialectName;
-    getTenantId?: (request: FastifyRequest) => TenantId | TenantId[] | null | undefined | Promise<TenantId | TenantId[] | null | undefined>;
+    /**
+     * Resolve the caller's tenant id(s) for this request. Returning one id (or an array, for a
+     * caller who belongs to several tenants) scopes every read and write to rows that tenant owns.
+     *
+     * ⚠️ **Returning `null`/`undefined` means ADMIN — no tenant filtering at all, i.e. full
+     * cross-tenant access.** "Unauthenticated" and "admin" therefore collapse to the same value.
+     * The tenant identity is read from the request (typically `request.user`, populated by your own
+     * auth hook in {@link onRequests}), which this plugin does not set. If that hook is missing,
+     * mis-ordered, or fails, `request.user` is `undefined` and the common `?? null` pattern yields
+     * `null` → the request is served as admin. Nothing here fails closed.
+     *
+     * To fail closed, make this callback (or the auth hook) **reject when there is no authenticated
+     * principal** instead of returning `null`, and reserve `null` for a real, authorized superadmin:
+     *
+     * ```ts
+     * getTenantId: (req) => {
+     *   if (!req.user) throw app.httpErrors.unauthorized(); // no principal → deny, never admin
+     *   return req.user.isSuperadmin ? null : req.user.organizationId;
+     * }
+     * ```
+     */
+    getTenantId?: (request: ApiRequest) => TenantId | TenantId[] | null | undefined | Promise<TenantId | TenantId[] | null | undefined>;
     debug?: boolean;
     /**
      * Hard cap on the search page size (the `itemsPerPage` query param), and the row LIMIT applied

package/dist/types/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/types/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,CAAC;IAChG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,QAAQ,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,GAC/E,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;;;;;;;;OAiBG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,qGAAqG;AACrG,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,OAAO,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/types/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,QAAQ,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;IACnC,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,QAAQ,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,GAC3E,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;;;;;;;;OAiBG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,qGAAqG;AACrG,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,OAAO,CAAC"}

package/dist/types/request.d.ts

@@ -0,0 +1,24 @@
+import type { FastifyRequest, FastifyReply } from 'fastify';
+/**
+ * The request the plugin carries from a route down to consumer code.
+ *
+ * Every hook, `validate` and `getTenantId` receive it; **nothing inside `src/lib/` ever reads a
+ * property off it**. It is an opaque token that the HTTP layer produces and consumer code
+ * consumes, and the engines only forward — which is why the engines, the schema builders and
+ * the write pipeline hold no dependency on a web framework at all, only on this name.
+ *
+ * That is the point of the alias: it is the single seam where the plugin's core meets Fastify.
+ * A second HTTP adapter — or a core published apart from one — changes this file and nothing
+ * else, and `.dependency-cruiser.mjs` keeps it that way by refusing a `fastify` import anywhere
+ * under `src/lib/` or `src/types/` but here.
+ *
+ * It is a plain alias rather than a generic parameter on `ITable`: that type appears bare in
+ * over a hundred places, and threading `<Req>` through all of them — plus `DbTables`, plus
+ * every `*Params` — would change the public type surface today for a benefit that only
+ * materialises once the core ships as its own package. See
+ * [ADR 0018](../../docs/adr/0018-one-seam-to-the-http-framework.md).
+ */
+export type ApiRequest = FastifyRequest;
+/** The reply, which only the HTTP layer's own options need to name. */
+export type ApiReply = FastifyReply;
+//# sourceMappingURL=request.d.ts.map

package/dist/types/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/types/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE5D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,UAAU,GAAG,cAAc,CAAC;AAExC,uEAAuE;AACvE,MAAM,MAAM,QAAQ,GAAG,YAAY,CAAC"}

package/dist/types/request.js

@@ -0,0 +1 @@
+export {};

package/dist/types/schema.d.ts

@@ -8,5 +8,20 @@ export interface SchemaDefinition<T = Record<string, TSchema>> {
     partialValidation: TObject;
     /** PRIMARY KEY fields (camelCase) as introspected from the DB. Set by generated schemas. */
     primaryKey?: string[];
+    /**
+     * Fields (camelCase) the database computes from an expression — `GENERATED ALWAYS AS (...)`.
+     * Set by generated schemas. They are readable like any other column but every write path
+     * drops them: the engine rejects a value for them, so offering the field could only ever
+     * turn a client mistake into a driver error.
+     */
+    generatedFields?: string[];
+    /**
+     * True when the underlying relation is a view. Set by generated schemas.
+     *
+     * A view is a table config like any other — this only records that the database had no
+     * PRIMARY KEY to report, so an absent `primaryKey` means "not declared" rather than
+     * "this data has no key".
+     */
+    isView?: boolean;
 }
 //# sourceMappingURL=schema.d.ts.map

package/dist/types/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/types/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC3D,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC;IACV,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/types/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC3D,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC;IACV,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,4FAA4F;IAC5F,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB"}

package/dist/types/search.d.ts

@@ -1,3 +1,4 @@
+import type { ApiRequest } from './request.js';
 import type { QueryClient } from '../lib/db.js';
 import type { ITable, FilterRecord } from './table.js';
 import type { TenantContext } from './tenant.js';
@@ -35,6 +36,8 @@ export interface SearchParams {
      * sets it from `maxItemsPerPage`.
      */
     maxRows?: number;
+    /** Handed to the `afterRead` hook; absent for a programmatic caller that did not pass one. */
+    request?: ApiRequest;
 }
 export interface PaginationResult {
     total: number;

package/dist/types/search.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/types/search.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,WAAW,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B"}
+{"version":3,"file":"search.d.ts","sourceRoot":"","sources":["../../src/types/search.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,WAAW,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B"}

package/dist/types/table.d.ts

@@ -1,6 +1,6 @@
 import type { Expression, ConditionBuilder, ConditionValueOrUndefined, DialectName as CbDialect } from 'node-condition-builder';
 import type { TSchema, Static } from '@sinclair/typebox';
-import type { FastifyRequest, FastifyReply } from 'fastify';
+import type { ApiRequest, ApiReply } from './request.js';
 import type { QueryClient } from '../lib/db.js';
 import type { SchemaDefinition } from './schema.js';
 import type { ComputedFieldFn } from './computed.js';
@@ -23,6 +23,14 @@ export type ExtendedConditionFn = (condition: ConditionBuilder, filters: FilterR
  * resolve against the OUTER query.
  */
 export type TableFilterFn = (filters: FilterRecord, dialect?: CbDialect, qualifier?: string) => ConditionBuilder;
+/** Which read path produced the rows an `afterRead` hook is handed. */
+export type ReadSource = 'get' | 'search' | 'joinMultiple' | 'joinLeft';
+/** Where the rows an `afterRead` hook receives came from. */
+export interface AfterReadContext {
+    source: ReadSource;
+    /** The relation's alias, on the two join sources; absent on `get` and `search`. */
+    alias?: string;
+}
 export interface ITable<F extends Record<string, TSchema> = Record<string, TSchema>> {
     primary: (string & keyof F) | (string & keyof F)[];
     Schema: SchemaDefinition<F>;
@@ -41,16 +49,37 @@ export interface ITable<F extends Record<string, TSchema> = Record<string, TSche
     allowedReadJoins?: JoinDefinition[];
     allowedWriteJoins?: JoinDefinition[];
     upsertMap?: Map<SchemaDefinition, string[]>;
+    /**
+     * Narrow a field's generated type where the DB could only describe it loosely: a column
+     * Postgres calls `text` is an email, a UUID, a URL; an `integer` has a range. The generated
+     * schema is as precise as `information_schema` allows, and this is where the rest goes.
+     *
+     * **Write bodies only.** An override is a rule about what this API accepts from now on, and
+     * the rows already in the table were written before it existed: a column narrowed to
+     * `format: 'email'` today holds whatever was accepted last year. Narrowing the response
+     * would publish a promise about data nobody can retroactively make true, so responses and
+     * the `filters` map stay on the generated type.
+     *
+     * The override is taken **verbatim**, because on the request side the schema is the rule: no
+     * `Type.Optional` means the field is mandatory and no `Nullable` means an explicit `null` is
+     * rejected, whatever the column allows. That is how a column the database had to leave
+     * nullable, because it was added to a populated table, is made mandatory going forward.
+     *
+     * It is not a re-typing mechanism. Nothing stops an override from turning a `number` into a
+     * `string`, but the value crossing the wire is still whatever the driver read from the
+     * column, so the declaration would simply be false. Transforming a value between storage and
+     * API is what `afterRead` (out) and `beforeInsert`/`beforeUpdate` (in) are for.
+     */
     schemaOverrides?: Partial<Record<string & keyof F, TSchema>>;
     validate?: ValidatorFn<F>;
     validateBulk?: BulkValidatorFn<F>;
-    beforeInsert?: (db: QueryClient, req: FastifyRequest, record: {
+    beforeInsert?: (db: QueryClient, req: ApiRequest, record: {
         [K in keyof F]?: Static<F[K]> | Expression | null;
     }) => Promise<void>;
-    beforeUpdate?: (db: QueryClient, req: FastifyRequest, fields: {
+    beforeUpdate?: (db: QueryClient, req: ApiRequest, fields: {
         [K in keyof F]?: Static<F[K]> | Expression | null;
     }, secondaryFieldsFetcher?: unknown) => void | Promise<void>;
-    afterInsert?: (db: QueryClient, req: FastifyRequest, record: {
+    afterInsert?: (db: QueryClient, req: ApiRequest, record: {
         [K in keyof F]?: Static<F[K]>;
     }, secondaryRecords?: unknown) => Promise<void>;
     /**
@@ -59,9 +88,34 @@ export interface ITable<F extends Record<string, TSchema> = Record<string, TSche
      * adapter supports transactions). Receives the camelCase input record (including the
      * PK) plus the secondaries/deletions results, mirroring `afterInsert`.
      */
-    afterUpdate?: (db: QueryClient, req: FastifyRequest, record: {
+    afterUpdate?: (db: QueryClient, req: ApiRequest, record: {
         [K in keyof F]?: Static<F[K]> | Expression | null;
     }, secondaryRecords?: unknown, deletionRecords?: unknown) => void | Promise<void>;
+    /**
+     * Runs on the rows a read returned, once per result set, before they become the response.
+     * The read-side counterpart of `beforeInsert`/`beforeUpdate`: the place to turn a stored
+     * representation back into the API one (decrypting a column, unpacking a blob).
+     *
+     * `rows` are camelCase records and are mutated **in place** — the return value is ignored.
+     * Rows cannot be added or removed: the pagination `COUNT` has already run, so a hook that
+     * dropped rows would report a `total` that does not match what it returned. Narrowing what
+     * a caller sees is `filters`, `tenantScope` and `readExclude`; hiding a field is
+     * `readExclude`.
+     *
+     * Declared on the table that OWNS the column, and it follows a join: the hook runs whenever
+     * that table's rows surface, including through a `joinMultiple` or `joinLeft` declared on
+     * another table (`ctx.source` and `ctx.alias` say which). It does not run on `joinGroup`,
+     * whose rows are aggregates rather than table rows.
+     *
+     * Not called when the read returned no rows. Whatever the hook writes is serialized against
+     * the response schema, so a transform that changes a field's JSON type needs a matching
+     * `schemaOverrides` entry — without it `fast-json-stringify` coerces the value silently.
+     *
+     * `req` is the request that triggered the read. Same caveat as `beforeDelete`:
+     * present through the auto-generated HTTP routes, `undefined` when a programmatic caller
+     * invokes `sqlApi.search()`/`sqlApi.get()` without passing one.
+     */
+    afterRead?: (db: QueryClient, req: ApiRequest | undefined, rows: Record<string, unknown>[], ctx: AfterReadContext) => void | Promise<void>;
     /**
      * Runs before a single record is deleted (DELETE /rest/:id). Throw to abort the
      * deletion (the thrown error's `statusCode`/`message` are surfaced to the client).
@@ -70,17 +124,17 @@ export interface ITable<F extends Record<string, TSchema> = Record<string, TSche
      * For tenant-scoped tables the hook only runs once ownership has been verified, so it
      * never fires for rows the caller cannot access.
      *
-     * `req` is the Fastify request that triggered the operation. It is always present when
+     * `req` is the request that triggered the operation. It is always present when
      * the delete comes through the auto-generated HTTP route. It is `undefined` only if you
      * call `sqlApi.delete(table, id)` programmatically without passing a request — in that
      * case any hook that reads request context (e.g. `req.user`) must guard for it.
      */
-    beforeDelete?: (db: QueryClient, req: FastifyRequest, id: string | number) => void | Promise<void>;
+    beforeDelete?: (db: QueryClient, req: ApiRequest, id: string | number) => void | Promise<void>;
     /**
      * Runs after a single record has been deleted (DELETE /rest/:id). Not called when the
      * record was not found (404). Same `req` caveat as `beforeDelete`.
      */
-    afterDelete?: (db: QueryClient, req: FastifyRequest, id: string | number) => void | Promise<void>;
+    afterDelete?: (db: QueryClient, req: ApiRequest, id: string | number) => void | Promise<void>;
     /**
      * Bulk counterpart of `beforeDelete`, invoked ONCE with all ids before a bulk delete
      * (POST /bulk/:table/delete). Called once — not per id — to preserve the single-query
@@ -90,13 +144,13 @@ export interface ITable<F extends Record<string, TSchema> = Record<string, TSche
      * Same `req` caveat as `beforeDelete`: present via the HTTP route, `undefined` only when
      * `sqlApi.bulkDelete(table, ids)` is called programmatically without a request.
      */
-    beforeBulkDelete?: (db: QueryClient, req: FastifyRequest, ids: (string | number)[]) => void | Promise<void>;
+    beforeBulkDelete?: (db: QueryClient, req: ApiRequest, ids: (string | number)[]) => void | Promise<void>;
     /**
      * Bulk counterpart of `afterDelete`, invoked ONCE after a bulk delete with the ids that
      * were ACTUALLY deleted (which may be a subset of the requested ids). Not called when
      * nothing was deleted. Same `req` caveat as `beforeBulkDelete`.
      */
-    afterBulkDelete?: (db: QueryClient, req: FastifyRequest, deletedIds: (string | number)[]) => void | Promise<void>;
+    afterBulkDelete?: (db: QueryClient, req: ApiRequest, deletedIds: (string | number)[]) => void | Promise<void>;
     /**
      * Whitelist of auto-generated HTTP routes for this table. When omitted, ALL operations
      * are exposed (search, get, insert, update, delete, bulkUpsert, bulkDelete) — the
@@ -120,10 +174,29 @@ export interface ITable<F extends Record<string, TSchema> = Record<string, TSche
      * password hash). Primary-key fields cannot be excluded.
      */
     readExclude?: (string & keyof F)[];
+    /**
+     * Fields that no write may carry: removed from the insert, update and bulk-upsert bodies
+     * (so sending one is a 400, not a driver error) and dropped again in the engines, which
+     * `sqlApi.*` reaches without the HTTP schemas. Reads are untouched — the field stays
+     * projected, filterable and orderable.
+     *
+     * It is the write-side counterpart of `readExclude`, and it exists for columns the database
+     * refuses to be told about: a `GENERATED ALWAYS AS (<expr>)` column is already excluded
+     * automatically through the Schema's `generatedFields`, and this key covers the rest — a
+     * column a trigger owns, one a migration is about to drop.
+     *
+     * Not a per-caller permission: it is static and applies to everyone, admins included.
+     * Field-level rules that depend on who is asking belong in `beforeUpdate` (silent strip) or
+     * `validate` (loud 400). Not `excludeFromCreation` either — that one whitelists client input
+     * on insert only, and deliberately lets a hook assign the field afterwards.
+     *
+     * The primary key cannot be excluded: the update body identifies the row with it.
+     */
+    writeExclude?: (string & keyof F)[];
     defaultOrder?: string;
     excludeFromCreation?: (string & keyof F)[];
     distinctResults?: boolean;
-    onRequests?: ((request: FastifyRequest, reply: FastifyReply) => Promise<void | FastifyReply>)[];
+    onRequests?: ((request: ApiRequest, reply: ApiReply) => Promise<void | ApiReply>)[];
     tenantScope?: TenantScope;
 }
 export type DbTables = Record<string, ITable<any>>;