@sequenceholdings/orm 2.8.5 → 2.10.0

package/dist/{constants-Dou1RkTo.d.cts → constants-D2o0vK6U.d.cts}

@@ -100,5 +100,12 @@ declare function materializedRefreshFunctionName(table: string): string;
  * a full refresh never reads a snapshot older than a write it then overwrites.
  */
 declare function materializeLockKey(schema: string, table: string): string;
+/**
+ * Committed copy of the exact operation documents a package registers —
+ * GraphQL text and SQL operations already materialized as inert JSON. Atlas
+ * recompiles it to check that a registered operation set is what a commit holds.
+ */
+declare const OPERATION_DOCUMENTS_FILE = "operations.documents.json";
+declare const OPERATION_DOCUMENTS_VERSION: 1;
 
-export { CELLS_FIELD as C, DEFINITION_FILE_EXTENSIONS as D, HASH_DOMAIN as H, IDENTIFIER_PATTERN as I, MATERIALIZE_ACTOR as M, NAMESPACE_PATTERN as N, ORM_DATA_TOKEN_HEADER as O, QUALIFIED_TABLE_PATTERN as Q, RESERVED_COLUMN_NAMES as R, SYNCED_SOURCE_PATTERN as S, CELL_PARTS as a, type CellPart as b, cellColumnName as c, ORM_SERVICE_DATA_TOKEN_HEADER as d, CAPABILITY_KEY_PATTERN as e, CELL_PART_SUFFIX as f, CLAIM_KEY_PATTERN as g, COLUMN_IDENTIFIER_PATTERN as h, CONSUMER_ROLE_SUFFIX as i, MATERIALIZE_CLAIMS_JSON as j, MAX_DEFINITION_FILE_BYTES as k, MAX_GENERATED_SDL_BYTES as l, MAX_IDENTIFIER_LENGTH as m, MAX_PERSISTED_READ_ROWS as n, MAX_TRACKED_COLUMN_NAME as o, NAMESPACE_CONFIG_FILENAMES as p, ORM_REGISTRATION_MAX_BYTES as q, ORM_SCHEMA_PREFIX as r, RESERVED_TABLE_NAMES as s, consumerRoleName as t, materializeLockKey as u, materializedRefreshFunctionName as v, ormSchemaName as w };
+export { CELLS_FIELD as C, DEFINITION_FILE_EXTENSIONS as D, HASH_DOMAIN as H, IDENTIFIER_PATTERN as I, MATERIALIZE_ACTOR as M, NAMESPACE_PATTERN as N, ORM_DATA_TOKEN_HEADER as O, QUALIFIED_TABLE_PATTERN as Q, RESERVED_COLUMN_NAMES as R, SYNCED_SOURCE_PATTERN as S, CELL_PARTS as a, type CellPart as b, cellColumnName as c, ORM_SERVICE_DATA_TOKEN_HEADER as d, CAPABILITY_KEY_PATTERN as e, CELL_PART_SUFFIX as f, CLAIM_KEY_PATTERN as g, COLUMN_IDENTIFIER_PATTERN as h, CONSUMER_ROLE_SUFFIX as i, MATERIALIZE_CLAIMS_JSON as j, MAX_DEFINITION_FILE_BYTES as k, MAX_GENERATED_SDL_BYTES as l, MAX_IDENTIFIER_LENGTH as m, MAX_PERSISTED_READ_ROWS as n, MAX_TRACKED_COLUMN_NAME as o, NAMESPACE_CONFIG_FILENAMES as p, OPERATION_DOCUMENTS_FILE as q, OPERATION_DOCUMENTS_VERSION as r, ORM_REGISTRATION_MAX_BYTES as s, ORM_SCHEMA_PREFIX as t, RESERVED_TABLE_NAMES as u, consumerRoleName as v, materializeLockKey as w, materializedRefreshFunctionName as x, ormSchemaName as y };

package/dist/{constants-Dou1RkTo.d.ts → constants-D2o0vK6U.d.ts}

@@ -100,5 +100,12 @@ declare function materializedRefreshFunctionName(table: string): string;
  * a full refresh never reads a snapshot older than a write it then overwrites.
  */
 declare function materializeLockKey(schema: string, table: string): string;
+/**
+ * Committed copy of the exact operation documents a package registers —
+ * GraphQL text and SQL operations already materialized as inert JSON. Atlas
+ * recompiles it to check that a registered operation set is what a commit holds.
+ */
+declare const OPERATION_DOCUMENTS_FILE = "operations.documents.json";
+declare const OPERATION_DOCUMENTS_VERSION: 1;
 
-export { CELLS_FIELD as C, DEFINITION_FILE_EXTENSIONS as D, HASH_DOMAIN as H, IDENTIFIER_PATTERN as I, MATERIALIZE_ACTOR as M, NAMESPACE_PATTERN as N, ORM_DATA_TOKEN_HEADER as O, QUALIFIED_TABLE_PATTERN as Q, RESERVED_COLUMN_NAMES as R, SYNCED_SOURCE_PATTERN as S, CELL_PARTS as a, type CellPart as b, cellColumnName as c, ORM_SERVICE_DATA_TOKEN_HEADER as d, CAPABILITY_KEY_PATTERN as e, CELL_PART_SUFFIX as f, CLAIM_KEY_PATTERN as g, COLUMN_IDENTIFIER_PATTERN as h, CONSUMER_ROLE_SUFFIX as i, MATERIALIZE_CLAIMS_JSON as j, MAX_DEFINITION_FILE_BYTES as k, MAX_GENERATED_SDL_BYTES as l, MAX_IDENTIFIER_LENGTH as m, MAX_PERSISTED_READ_ROWS as n, MAX_TRACKED_COLUMN_NAME as o, NAMESPACE_CONFIG_FILENAMES as p, ORM_REGISTRATION_MAX_BYTES as q, ORM_SCHEMA_PREFIX as r, RESERVED_TABLE_NAMES as s, consumerRoleName as t, materializeLockKey as u, materializedRefreshFunctionName as v, ormSchemaName as w };
+export { CELLS_FIELD as C, DEFINITION_FILE_EXTENSIONS as D, HASH_DOMAIN as H, IDENTIFIER_PATTERN as I, MATERIALIZE_ACTOR as M, NAMESPACE_PATTERN as N, ORM_DATA_TOKEN_HEADER as O, QUALIFIED_TABLE_PATTERN as Q, RESERVED_COLUMN_NAMES as R, SYNCED_SOURCE_PATTERN as S, CELL_PARTS as a, type CellPart as b, cellColumnName as c, ORM_SERVICE_DATA_TOKEN_HEADER as d, CAPABILITY_KEY_PATTERN as e, CELL_PART_SUFFIX as f, CLAIM_KEY_PATTERN as g, COLUMN_IDENTIFIER_PATTERN as h, CONSUMER_ROLE_SUFFIX as i, MATERIALIZE_CLAIMS_JSON as j, MAX_DEFINITION_FILE_BYTES as k, MAX_GENERATED_SDL_BYTES as l, MAX_IDENTIFIER_LENGTH as m, MAX_PERSISTED_READ_ROWS as n, MAX_TRACKED_COLUMN_NAME as o, NAMESPACE_CONFIG_FILENAMES as p, OPERATION_DOCUMENTS_FILE as q, OPERATION_DOCUMENTS_VERSION as r, ORM_REGISTRATION_MAX_BYTES as s, ORM_SCHEMA_PREFIX as t, RESERVED_TABLE_NAMES as u, consumerRoleName as v, materializeLockKey as w, materializedRefreshFunctionName as x, ormSchemaName as y };

package/dist/dynamic-input.d.cts

@@ -1,6 +1,6 @@
 import { CmpOp, TableMetaIr } from './ir.cjs';
 import 'zod';
-import './constants-Dou1RkTo.cjs';
+import './constants-D2o0vK6U.cjs';
 
 /**
  * §4f dynamic-input validators — PURE, data-only functions the data plane

package/dist/dynamic-input.d.ts

@@ -1,6 +1,6 @@
 import { CmpOp, TableMetaIr } from './ir.js';
 import 'zod';
-import './constants-Dou1RkTo.js';
+import './constants-D2o0vK6U.js';
 
 /**
  * §4f dynamic-input validators — PURE, data-only functions the data plane

package/dist/index.cjs

@@ -205,6 +205,8 @@ function materializedRefreshFunctionName(table) {
 function materializeLockKey(schema, table) {
   return `orm:materialize:${schema}.${table}`;
 }
+var OPERATION_DOCUMENTS_FILE = "operations.documents.json";
+var OPERATION_DOCUMENTS_VERSION = 1;
 
 // src/errors.ts
 var OrmDefinitionError = class extends Error {
@@ -7152,19 +7154,20 @@ var variableIrSchema = zod.z.object({
   defaultValue: variableDefaultIrSchema.optional()
 });
 var sqlColumnSchema = zod.z.object({ name: zod.z.string(), type: zod.z.enum(["text", "boolean", "integer", "bigint", "numeric", "double", "uuid", "date", "timestamptz", "jsonb"]), nullable: zod.z.boolean() });
+var sqlObjectIrSchema = zod.z.object({
+  ref: zod.z.string(),
+  table: zod.z.string(),
+  columns: zod.z.array(sqlColumnSchema.extend({ type: zod.z.string() })).min(1),
+  scan: zod.z.string().min(1),
+  read: zod.z.array(zod.z.string()).min(1)
+}).strict();
 var compiledOperationSchema = zod.z.object({
   language: zod.z.literal("sql").optional(),
   /** Server-compiled object catalog and permission ceiling, never caller SQL. */
   sqlQuery: zod.z.object({
     catalog: zod.z.object({
       identity: zod.z.string(),
-      objects: zod.z.array(zod.z.object({
-        ref: zod.z.string(),
-        table: zod.z.string(),
-        columns: zod.z.array(sqlColumnSchema.extend({ type: zod.z.string() })).min(1),
-        scan: zod.z.string().min(1),
-        read: zod.z.array(zod.z.string()).min(1)
-      }).strict()).min(1).max(256)
+      objects: zod.z.array(sqlObjectIrSchema).min(1).max(256)
     }).strict(),
     read: zod.z.array(zod.z.string()).min(1).max(256),
     maxRows: zod.z.number().int().min(1).max(1e4)
@@ -7634,6 +7637,42 @@ async function readSnapshot(dir, ordinal) {
   const path$1 = path.join(dir, MIGRATIONS_DIRNAME, META_DIRNAME, `${pad(ordinal)}.snapshot.json`);
   return parseJson(path$1, await readSnapshotText(dir, ordinal));
 }
+async function verifyCommittedLedger(dir, entries) {
+  const firstRequiredSnapshot = entries.length - 2;
+  let previousId3;
+  let previousSnapshotPresent = false;
+  let previousHash = null;
+  for (const [index3, entry] of entries.entries()) {
+    const sql7 = await readMigrationSql(dir, entry);
+    if (checksumOf(sql7) !== entry.checksum) {
+      return `${MIGRATIONS_DIRNAME}/${entry.name}.sql does not match its journal checksum \u2014 committed migrations must not be edited`;
+    }
+    const snapshotText = index3 >= firstRequiredSnapshot ? await readSnapshotText(dir, entry.ordinal) : await readPrunableSnapshotText(dir, entry.ordinal);
+    if (snapshotText !== void 0) {
+      if (checksumOf(snapshotText) !== entry.snapshot_checksum) {
+        return `the snapshot for ${entry.name} does not match its journal checksum \u2014 committed snapshots must not be edited (the next diff builds on it)`;
+      }
+      const snapshot = JSON.parse(snapshotText);
+      if (previousSnapshotPresent && snapshot.prevId !== previousId3) {
+        return `snapshot chain broken at ${entry.name} \u2014 regenerate the workspace with \`seq-studio orm diff\``;
+      }
+      previousId3 = snapshot.id;
+    }
+    previousSnapshotPresent = snapshotText !== void 0;
+    if (entry.previous_content_hash !== previousHash) {
+      return `content-hash chain broken at ${entry.name} \u2014 migrations must be appended in order by \`seq-studio orm diff\``;
+    }
+    previousHash = entry.content_hash;
+  }
+  return void 0;
+}
+async function readPrunableSnapshotText(dir, ordinal) {
+  const path$1 = path.join(dir, MIGRATIONS_DIRNAME, META_DIRNAME, `${pad(ordinal)}.snapshot.json`);
+  return promises.readFile(path$1, "utf8").catch((error) => {
+    if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+    throw error;
+  });
+}
 async function readMigrationSql(dir, entry) {
   const path$1 = path.join(dir, MIGRATIONS_DIRNAME, `${entry.name}.sql`);
   return promises.readFile(path$1, "utf8").catch(() => {
@@ -7794,30 +7833,10 @@ async function checkWorkspace({
     log(`no committed migrations for '${loaded.definition.namespace}' \u2014 run \`seq-studio orm diff\` and commit the result`);
     return 1;
   }
-  let previousId3;
-  let previousHash = null;
-  for (const entry of workspace.journal.entries) {
-    const sql7 = await readMigrationSql(dir, entry);
-    if (checksumOf(sql7) !== entry.checksum) {
-      log(`${MIGRATIONS_DIRNAME}/${entry.name}.sql does not match its journal checksum \u2014 committed migrations must not be edited`);
-      return 1;
-    }
-    const snapshotText = await readSnapshotText(dir, entry.ordinal);
-    if (checksumOf(snapshotText) !== entry.snapshot_checksum) {
-      log(`the snapshot for ${entry.name} does not match its journal checksum \u2014 committed snapshots must not be edited (the next diff builds on it)`);
-      return 1;
-    }
-    const snapshot = JSON.parse(snapshotText);
-    if (entry.ordinal > 1 && snapshot.prevId !== previousId3) {
-      log(`snapshot chain broken at ${entry.name} \u2014 regenerate the workspace with \`seq-studio orm diff\``);
-      return 1;
-    }
-    if (entry.previous_content_hash !== previousHash) {
-      log(`content-hash chain broken at ${entry.name} \u2014 migrations must be appended in order by \`seq-studio orm diff\``);
-      return 1;
-    }
-    previousId3 = snapshot.id;
-    previousHash = entry.content_hash;
+  const broken = await verifyCommittedLedger(dir, workspace.journal.entries);
+  if (broken) {
+    log(broken);
+    return 1;
   }
   if (tip.content_hash !== loaded.contentHash) {
     log(`definitions changed since ${tip.name} \u2014 run \`seq-studio orm diff\` and commit the new migration`);
@@ -8641,6 +8660,8 @@ exports.NAMESPACE_CONFIG_BRAND = NAMESPACE_CONFIG_BRAND;
 exports.NAMESPACE_CONFIG_FILE = NAMESPACE_CONFIG_FILE;
 exports.NAMESPACE_CONFIG_FILENAMES = NAMESPACE_CONFIG_FILENAMES;
 exports.NAMESPACE_PATTERN = NAMESPACE_PATTERN;
+exports.OPERATION_DOCUMENTS_FILE = OPERATION_DOCUMENTS_FILE;
+exports.OPERATION_DOCUMENTS_VERSION = OPERATION_DOCUMENTS_VERSION;
 exports.ORM_DATA_TOKEN_HEADER = ORM_DATA_TOKEN_HEADER;
 exports.ORM_MIGRATION_EXPORT_FILE = ORM_MIGRATION_EXPORT_FILE;
 exports.ORM_MIGRATION_EXPORT_MAX_BYTES = ORM_MIGRATION_EXPORT_MAX_BYTES;
@@ -8816,6 +8837,7 @@ exports.rootIrSchema = rootIrSchema;
 exports.securityStatements = securityStatements;
 exports.selectionIrSchema = selectionIrSchema;
 exports.serializeNamespace = serializeNamespace;
+exports.sqlObjectIrSchema = sqlObjectIrSchema;
 exports.sqlTypeName = sqlTypeName;
 exports.stableJson = stableJson;
 exports.syncedBackingRevokeStatements = syncedBackingRevokeStatements;