@sequenceholdings/orm 2.7.0 → 2.8.1

package/dist/authoring.d.cts

@@ -3,7 +3,7 @@ import { b as CellPart } from './constants-Dou1RkTo.cjs';
 import { ColumnsSelection } from 'drizzle-orm';
 import { TypedQueryBuilder } from 'drizzle-orm/query-builders/query-builder';
 import { QueryBuilder, PgView, PgTable, AnyPgColumn } from 'drizzle-orm/pg-core';
-export { S as SqlOperationDefinition, d as defineOperation } from './definition-DjfC7Lll.cjs';
+export { S as SqlOperationDefinition, d as defineOperation } from './definition-B99BsOAO.cjs';
 import 'zod';
 import './policy-1iZbGnZZ.cjs';
 
@@ -611,6 +611,12 @@ interface SyncedTableConfig {
     /** Reflected read-only source as a safe qualified identifier: `<schema>.<table>`. */
     source: string;
     description?: string;
+    /**
+     * View dependency only: keep the reflected source and its read policy, but
+     * exclude direct GraphQL and SQL access. Requires a keyed source contract.
+     * Publish the permitted result through a managed view instead.
+     */
+    internal?: boolean;
     /**
      * Primary-key property/column names, mutually exclusive with column-level
      * `.primaryKey()`. Explicit `[]` declares a read-only bag with no row identity.

package/dist/authoring.d.ts

@@ -3,7 +3,7 @@ import { b as CellPart } from './constants-Dou1RkTo.js';
 import { ColumnsSelection } from 'drizzle-orm';
 import { TypedQueryBuilder } from 'drizzle-orm/query-builders/query-builder';
 import { QueryBuilder, PgView, PgTable, AnyPgColumn } from 'drizzle-orm/pg-core';
-export { S as SqlOperationDefinition, d as defineOperation } from './definition-DjfC7Lll.js';
+export { S as SqlOperationDefinition, d as defineOperation } from './definition-B99BsOAO.js';
 import 'zod';
 import './policy-1iZbGnZZ.js';
 
@@ -611,6 +611,12 @@ interface SyncedTableConfig {
     /** Reflected read-only source as a safe qualified identifier: `<schema>.<table>`. */
     source: string;
     description?: string;
+    /**
+     * View dependency only: keep the reflected source and its read policy, but
+     * exclude direct GraphQL and SQL access. Requires a keyed source contract.
+     * Publish the permitted result through a managed view instead.
+     */
+    internal?: boolean;
     /**
      * Primary-key property/column names, mutually exclusive with column-level
      * `.primaryKey()`. Explicit `[]` declares a read-only bag with no row identity.

package/dist/authoring.js

@@ -278,6 +278,22 @@ function toPlatformUser(options) {
 function isSeqLink(value) {
   return typeof value === "object" && value !== null && value.kind === LINK_BRAND;
 }
+var TABLE_CONFIG_KEYS = /* @__PURE__ */ new Set([
+  "displayName",
+  "description",
+  "renamedFrom",
+  "primaryKey",
+  "indexes",
+  "checks",
+  "foreignKeys",
+  "links",
+  "policies",
+  "cowMutations",
+  "cellMetadata",
+  "cellRevisions",
+  "materializes",
+  "internal"
+]);
 function isSeqTable(value) {
   return typeof value === "object" && value !== null && value.kind === TABLE_BRAND;
 }
@@ -292,6 +308,11 @@ function assertIdentifier({ value, what, file, pattern = IDENTIFIER_PATTERN }) {
 function defineTable(name2, columns, config = {}) {
   const file = activeAuthoringContext()?.currentFile;
   assertIdentifier({ value: name2, what: "table name", file });
+  for (const key of Object.keys(config)) {
+    if (!TABLE_CONFIG_KEYS.has(key)) {
+      throw new OrmDefinitionError(`table "${name2}": unknown defineTable option "${key}"`, file);
+    }
+  }
   const entries = Object.entries(columns);
   if (entries.length === 0) {
     throw new OrmDefinitionError(`table "${name2}" declares no columns`, file);
@@ -384,6 +405,7 @@ function defineSyncedTable(name2, columnsOrConfig, maybeConfig) {
   if (config.primaryKey !== void 0) tableConfig.primaryKey = config.primaryKey;
   if (config.links !== void 0) tableConfig.links = config.links;
   if (config.policies !== void 0) tableConfig.policies = { read: config.policies.read };
+  if (config.internal === true) tableConfig.internal = true;
   const table = {
     kind: TABLE_BRAND,
     tableName: name2,
@@ -2745,6 +2767,11 @@ function serializeNamespace(input) {
     enumsByName.set(ref.name, ref);
   }
   const canonicalTables = tables.map((table) => buildCanonicalTable({ table, relationsByName, enumsByName }));
+  for (const table of tables) {
+    if (table.source !== void 0 && table.config.internal === true && config.exports && Object.hasOwn(config.exports, table.tableName)) {
+      throw new OrmDefinitionError(`internal synced source "${table.tableName}" cannot be exported; export a permitted managed view instead`, table.file);
+    }
+  }
   const canonicalEnums = [...enumsByName.values()].map((ref) => ({
     name: ref.name,
     values: [...ref.values]
@@ -3078,6 +3105,9 @@ function buildCanonicalLink({
   if (!relationsByName.has(targetName)) {
     return fail(`targets ${relationKind(target)} "${targetName}" which is not part of this namespace`);
   }
+  if (isSeqTable(target) && target.source !== void 0 && target.config.internal === true) {
+    return fail(`targets internal synced source "${targetName}"; expose a permitted managed view instead`);
+  }
   if (link.enforce && (!isSeqTable(relation) || !isSeqTable(target))) {
     return fail("cannot enforce a PostgreSQL foreign key involving a view");
   }