@sequenceholdings/orm 2.6.2 → 2.7.1

package/dist/authoring.d.cts

@@ -611,6 +611,12 @@ interface SyncedTableConfig {
     /** Reflected read-only source as a safe qualified identifier: `<schema>.<table>`. */
     source: string;
     description?: string;
+    /**
+     * View dependency only: keep the reflected source and its read policy, but
+     * exclude direct GraphQL and SQL access. Requires a keyed source contract.
+     * Publish the permitted result through a managed view instead.
+     */
+    internal?: boolean;
     /**
      * Primary-key property/column names, mutually exclusive with column-level
      * `.primaryKey()`. Explicit `[]` declares a read-only bag with no row identity.

package/dist/authoring.d.ts

@@ -611,6 +611,12 @@ interface SyncedTableConfig {
     /** Reflected read-only source as a safe qualified identifier: `<schema>.<table>`. */
     source: string;
     description?: string;
+    /**
+     * View dependency only: keep the reflected source and its read policy, but
+     * exclude direct GraphQL and SQL access. Requires a keyed source contract.
+     * Publish the permitted result through a managed view instead.
+     */
+    internal?: boolean;
     /**
      * Primary-key property/column names, mutually exclusive with column-level
      * `.primaryKey()`. Explicit `[]` declares a read-only bag with no row identity.

package/dist/authoring.js

@@ -384,6 +384,7 @@ function defineSyncedTable(name2, columnsOrConfig, maybeConfig) {
   if (config.primaryKey !== void 0) tableConfig.primaryKey = config.primaryKey;
   if (config.links !== void 0) tableConfig.links = config.links;
   if (config.policies !== void 0) tableConfig.policies = { read: config.policies.read };
+  if (config.internal === true) tableConfig.internal = true;
   const table = {
     kind: TABLE_BRAND,
     tableName: name2,
@@ -2745,6 +2746,11 @@ function serializeNamespace(input) {
     enumsByName.set(ref.name, ref);
   }
   const canonicalTables = tables.map((table) => buildCanonicalTable({ table, relationsByName, enumsByName }));
+  for (const table of tables) {
+    if (table.source !== void 0 && table.config.internal === true && config.exports && Object.hasOwn(config.exports, table.tableName)) {
+      throw new OrmDefinitionError(`internal synced source "${table.tableName}" cannot be exported; export a permitted managed view instead`, table.file);
+    }
+  }
   const canonicalEnums = [...enumsByName.values()].map((ref) => ({
     name: ref.name,
     values: [...ref.values]
@@ -3078,6 +3084,9 @@ function buildCanonicalLink({
   if (!relationsByName.has(targetName)) {
     return fail(`targets ${relationKind(target)} "${targetName}" which is not part of this namespace`);
   }
+  if (isSeqTable(target) && target.source !== void 0 && target.config.internal === true) {
+    return fail(`targets internal synced source "${targetName}"; expose a permitted managed view instead`);
+  }
   if (link.enforce && (!isSeqTable(relation) || !isSeqTable(target))) {
     return fail("cannot enforce a PostgreSQL foreign key involving a view");
   }