@vantreeseba/drizzle-graphql 7.0.0 → 7.1.0

package/dist/index.cjs

@@ -1017,7 +1017,7 @@ var batchedPaginatedRelationQuery = async (db, targetTable, foreignCol, whereCon
   }
   return rows;
 };
-var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx) => ({ tableName, relationName, relEntry, isOne }) => {
+var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx, limits) => ({ tableName, relationName, relEntry, isOne }) => {
   const parentTable = tables[tableName];
   const targetTableName = relEntry.targetTableName;
   const targetTable = tables[targetTableName];
@@ -1029,6 +1029,7 @@ var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx) => ({
     return void 0;
   }
   const { localColPropName, foreignCol, foreignColPropName } = joinCols;
+  const limitPolicy = isOne ? void 0 : limits?.(targetTableName);
   const targetPkNames = relEntry.targetPkNames ?? [];
   return async (parent, args, context, info) => {
     if (parent[relationName] !== void 0) {
@@ -1038,7 +1039,8 @@ var createRelationResolverFactory = (db, tables, nullOrdering, filterCtx) => ({
     if (localValue == null) {
       return isOne ? null : [];
     }
-    const { where: whereArg, orderBy: orderByArg, limit, offset, after } = args ?? {};
+    const { where: whereArg, orderBy: orderByArg, limit: requestedLimit, offset, after } = args ?? {};
+    const limit = applyLimitPolicy(requestedLimit, limitPolicy, `${tableName}.${relationName}`);
     const distinct = (args ?? {}).distinct?.length ? (args ?? {}).distinct : void 0;
     const cursorSelected = !isOne && !!info && selectsCursorField(info, targetTable);
     let cursorEntries;
@@ -1152,9 +1154,41 @@ var inputFieldDocs = (docs, column, tableName, columnName, fieldType) => {
   }
   return resolved;
 };
-var listFieldComplexity = (options) => ({ args, childComplexity }) => {
+var applyLimitPolicy = (limit, policy, fieldName) => {
+  if (!policy) {
+    return limit ?? void 0;
+  }
+  const { defaultLimit, maxLimit, clampToMax } = policy;
+  if (limit == null) {
+    const fallback = defaultLimit ?? maxLimit;
+    if (fallback === void 0) {
+      return void 0;
+    }
+    return maxLimit === void 0 ? fallback : Math.min(fallback, maxLimit);
+  }
+  if (maxLimit !== void 0 && limit > maxLimit) {
+    if (clampToMax) {
+      return maxLimit;
+    }
+    throw new import_graphql5.GraphQLError(`${fieldName}: 'limit' of ${limit} exceeds the maximum of ${maxLimit}.`);
+  }
+  return limit;
+};
+var resolveLimitPolicy = (global, table) => {
+  const defaultLimit = table?.defaultLimit ?? global?.defaultLimit;
+  const maxLimit = table?.maxLimit ?? global?.maxLimit;
+  if (defaultLimit === void 0 && maxLimit === void 0) {
+    return void 0;
+  }
+  return { defaultLimit, maxLimit, clampToMax: table?.clampToMax ?? global?.clampToMax ?? false };
+};
+var listFieldComplexity = (options, policy) => ({ args, childComplexity }) => {
   const limit = args["limit"];
-  const rows = typeof limit === "number" && limit > 0 ? limit : options.defaultListSize;
+  const requested = typeof limit === "number" && limit > 0 ? limit : void 0;
+  let rows = requested ?? policy?.defaultLimit ?? options.defaultListSize;
+  if (policy?.maxLimit !== void 0) {
+    rows = Math.min(rows, policy.maxLimit);
+  }
   return rows * Math.max(childComplexity, 1);
 };
 var aggregateFieldComplexity = (options) => ({ childComplexity }) => options.aggregateCost + childComplexity;
@@ -1785,7 +1819,11 @@ var generateSelectFields = (tables, tableName, relationMap, fromTableName, fromR
           },
           resolve,
           ...relationDocs,
-          ...cacheCtx.complexity ? { extensions: { complexity: listFieldComplexity(cacheCtx.complexity) } } : {}
+          ...cacheCtx.complexity ? {
+            extensions: {
+              complexity: listFieldComplexity(cacheCtx.complexity, cacheCtx.limits?.(targetTableName))
+            }
+          } : {}
         }
       ]);
       const aggregateFieldName = `${relationName}Aggregate`;
@@ -2264,7 +2302,7 @@ var extractFilters = (table, tableName, filters, relationCtx) => {
   }
   return variants.length ? variants.length > 1 ? (0, import_drizzle_orm4.and)(...variants) : variants[0] : void 0;
 };
-var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, originField, typeNameMapper, _isInitial = false, filterCtx) => {
+var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, originField, typeNameMapper, _isInitial = false, filterCtx, limits) => {
   const relationsForTable = relationMap[tableName];
   if (!relationsForTable) {
     return void 0;
@@ -2308,7 +2346,7 @@ var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, ori
     const relationField = Object.values(baseField).find((e) => e.name === relName);
     const relationArgs = relationField?.args;
     const offset = relationArgs?.offset ?? void 0;
-    const limit = relationArgs?.limit ?? void 0;
+    const limit = (0, import_drizzle_orm4.is)(relEntry.relation, import_drizzle_orm4.One) ? relationArgs?.limit ?? void 0 : applyLimitPolicy(relationArgs?.limit, limits?.(targetTableName), `${tableName}.${relName}`);
     const relWhere = relationArgs?.where;
     thisRecord.where = relWhere ? {
       RAW: (aliasedTable2) => extractFilters(aliasedTable2, relName, relWhere, relationFilterCtx(filterCtx, targetTableName))
@@ -2326,18 +2364,29 @@ var extractRelationsParamsInner = (relationMap, tables, tableName, typeName, ori
       relationField,
       typeNameMapper,
       false,
-      filterCtx
+      filterCtx,
+      limits
     ) : void 0;
     thisRecord.with = relWith;
     args[relName] = thisRecord;
   }
   return args;
 };
-var extractRelationsParams = (relationMap, tables, tableName, info, typeName, typeNameMapper, filterCtx) => {
+var extractRelationsParams = (relationMap, tables, tableName, info, typeName, typeNameMapper, filterCtx, limits) => {
   if (!info) {
     return void 0;
   }
-  return extractRelationsParamsInner(relationMap, tables, tableName, typeName, info, typeNameMapper, true, filterCtx);
+  return extractRelationsParamsInner(
+    relationMap,
+    tables,
+    tableName,
+    typeName,
+    info,
+    typeNameMapper,
+    true,
+    filterCtx,
+    limits
+  );
 };
 var pruneNonEagerRelations = (relationMap, shouldEagerLoad) => {
   const out = {};
@@ -2728,7 +2777,16 @@ var primaryKeyRestriction = (table, pkNames, keys) => {
 };
 var prepareMutationRelationColumns = (params) => {
   const { relationMap, tables, tableName, typeName, typeNameMapper, table, pkNames, parsedInfo } = params;
-  const withParams = relationMap[tableName] ? extractRelationsParams(relationMap, tables, tableName, parsedInfo, typeName, typeNameMapper) : void 0;
+  const withParams = relationMap[tableName] ? extractRelationsParams(
+    relationMap,
+    tables,
+    tableName,
+    parsedInfo,
+    typeName,
+    typeNameMapper,
+    void 0,
+    params.limits
+  ) : void 0;
   const hasRelations = !!(withParams && Object.keys(withParams).length);
   const baseColumns = extractSelectedColumnsFromTreeSQLFormat(parsedInfo.fieldsByTypeName[typeName], table, {
     tableName,
@@ -3032,7 +3090,16 @@ var runRelationalSelect = async (opts) => {
         ) : void 0
       )
     } : void 0,
-    with: relationMap[tableName] ? extractRelationsParams(relationMap, tables, tableName, parsedInfo, typeName, typeNameMapper, filterCtx) : void 0
+    with: relationMap[tableName] ? extractRelationsParams(
+      relationMap,
+      tables,
+      tableName,
+      parsedInfo,
+      typeName,
+      typeNameMapper,
+      filterCtx,
+      opts.limits
+    ) : void 0
   };
   if (single) {
     const result2 = await queryBase.findFirst(params);
@@ -3562,7 +3629,7 @@ var generateGroupBy = (db, tableName, table, typeName, fieldName, filterArgs, gr
 };
 
 // src/util/builders/mysql.ts
-var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true) => {
+var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -3570,6 +3637,7 @@ var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filter
     );
   }
   const table = tables[tableName];
+  const limitPolicy = limits?.(tableName);
   const pkNames = mysqlPrimaryKeyPropNames(table);
   const queryArgs = selectArrayArgs(
     orderArgs,
@@ -3592,8 +3660,10 @@ var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filter
           typeNameMapper,
           parsedInfo,
           ...args,
+          limit: applyLimitPolicy(args.limit, limitPolicy, fieldName),
           single: false,
           filterCtx,
+          limits,
           pkNames,
           db: executor,
           // MySQL sorts NULLs as the smallest values (first in ASC).
@@ -3606,7 +3676,7 @@ var generateSelectArray = (db, tableName, tables, relationMap, orderArgs, filter
     args: queryArgs
   };
 };
-var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx) => {
+var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -3634,6 +3704,7 @@ var generateSelectSingle = (db, tableName, tables, relationMap, orderArgs, filte
           ...args,
           single: true,
           filterCtx,
+          limits,
           pkNames,
           db: executor
         });
@@ -3848,7 +3919,7 @@ var generateDelete = (db, tableName, table, filterArgs, fieldName, single, requi
 };
 var mysqlPrimaryKeyPropNames = (table) => getPrimaryKeyPropNamesFromConfig(table, import_mysql_core2.getTableConfig);
 var generateSchemaData = (db, schema, relations, options) => {
-  const { relationsDepthLimit, prefixes, suffixes, typeNameMapper, shouldEagerLoad, features, complexity } = options;
+  const { relationsDepthLimit, prefixes, suffixes, typeNameMapper, shouldEagerLoad, features, complexity, limits } = options;
   const rawSchema = schema;
   const schemaEntries = Object.entries(rawSchema);
   const tableEntries = schemaEntries.filter(([_key, value]) => (0, import_drizzle_orm6.is)(value, import_mysql_core2.MySqlTable));
@@ -3873,7 +3944,8 @@ var generateSchemaData = (db, schema, relations, options) => {
     db,
     tables,
     "nulls-smallest",
-    filterCtx
+    filterCtx,
+    limits
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -3888,6 +3960,7 @@ var generateSchemaData = (db, schema, relations, options) => {
     listRelationFilterCache: /* @__PURE__ */ new Map(),
     aggregateTypeCache: /* @__PURE__ */ new Map(),
     complexity,
+    limits,
     docs: options.docs ?? {},
     features
   };
@@ -3958,7 +4031,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       typeName,
       typeNameMapper,
       filterCtx,
-      features.distinct
+      features.distinct,
+      limits
     );
     const selectSingleGenerated = generateSelectSingle(
       db,
@@ -3970,7 +4044,8 @@ var generateSchemaData = (db, schema, relations, options) => {
       singleFieldName,
       typeName,
       typeNameMapper,
-      filterCtx
+      filterCtx,
+      limits
     );
     const insertArrGenerated = features.insert ? generateInsertArray(
       db,
@@ -4120,7 +4195,7 @@ var generateSchemaData = (db, schema, relations, options) => {
       type: selectArrOutput,
       args: selectArrGenerated.args,
       resolve: selectArrGenerated.resolver,
-      ...complexity ? { extensions: { complexity: listFieldComplexity(complexity) } } : {}
+      ...complexity ? { extensions: { complexity: listFieldComplexity(complexity, limits?.(tableName)) } } : {}
     };
     queries[selectSingleGenerated.name] = {
       type: selectSingleOutput,
@@ -4605,9 +4680,10 @@ var updateWithNestedOps = async (params) => {
 };
 
 // src/util/builders/pg.ts
-var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true) => {
+var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
   const queryBase = db.query[tableName];
   const table = tables[tableName];
+  const limitPolicy = limits?.(tableName);
   const pkNames = pgPrimaryKeyPropNames(table);
   const queryArgs = selectArrayArgs(
     orderArgs,
@@ -4620,6 +4696,7 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
       try {
         const parsedInfo = (0, import_graphql_parse_resolve_info3.parseResolveInfo)(info, { deep: true });
         const { executor, queryBase: requestQueryBase } = resolveQueryExecutor(db, context, tableName, queryBase);
+        const limit = applyLimitPolicy(args.limit, limitPolicy, fieldName);
         if (requestQueryBase) {
           return await runRelationalSelect({
             queryBase: requestQueryBase,
@@ -4631,15 +4708,17 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
             typeNameMapper,
             parsedInfo,
             ...args,
+            limit,
             single: false,
             filterCtx,
+            limits,
             pkNames,
             db: executor,
             // PostgreSQL sorts NULLs as the largest values (last in ASC).
             nullOrdering: "nulls-largest"
           });
         }
-        const { offset, limit, orderBy, where, distinct, after } = args;
+        const { offset, orderBy, where, distinct, after } = args;
         const selectedColumnsSql = extractSelectedColumnsFromTreeSQLFormat(
           parsedInfo.fieldsByTypeName[typeName],
           table,
@@ -4729,7 +4808,7 @@ var generateSelectArray2 = (db, tableName, tables, relationMap, orderArgs, filte
     args: queryArgs
   };
 };
-var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx) => {
+var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
   const queryBase = db.query[tableName];
   const queryArgs = selectSingleArgs(orderArgs, filterArgs);
   const table = tables[tableName];
@@ -4753,6 +4832,7 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
             ...args,
             single: true,
             filterCtx,
+            limits,
             pkNames,
             db: executor
           });
@@ -4786,7 +4866,7 @@ var generateSelectSingle2 = (db, tableName, tables, relationMap, orderArgs, filt
   };
 };
 var pgPrimaryKeyPropNames = (table) => getPrimaryKeyPropNamesFromConfig(table, import_pg_core2.getTableConfig);
-var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested) => {
+var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
   const queryArgs = {
     values: {
       type: new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(baseType)))
@@ -4815,7 +4895,8 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -4843,7 +4924,7 @@ var generateInsertArray2 = (db, tableName, table, tables, relationMap, baseType,
     args: queryArgs
   };
 };
-var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested) => {
+var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
   const queryArgs = {
     values: {
       type: new import_graphql9.GraphQLNonNull(baseType)
@@ -4869,7 +4950,8 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const returning = nestedEntry ? nested.withJoinColumns(tableName, nestedEntry.ops, { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -4903,7 +4985,7 @@ var generateInsertSingle2 = (db, tableName, table, tables, relationMap, baseType
     args: queryArgs
   };
 };
-var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested) => {
+var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits) => {
   const queryArgs = {
     values: {
       type: single ? new import_graphql9.GraphQLNonNull(baseType) : new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(baseType)))
@@ -4935,7 +5017,8 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runUpsert = async (target, values) => {
@@ -4974,7 +5057,7 @@ var generateUpsert2 = (db, tableName, table, tables, relationMap, baseType, onCo
     args: queryArgs
   };
 };
-var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested) => {
+var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits) => {
   const queryArgs = {
     set: {
       type: new import_graphql9.GraphQLNonNull(setArgs)
@@ -5001,7 +5084,8 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const entry = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
           const nestedOps = entry && nested.hasOps(entry.ops) ? entry.ops : void 0;
@@ -5048,7 +5132,7 @@ var generateUpdate2 = (db, tableName, table, tables, relationMap, setArgs, filte
     args: queryArgs
   };
 };
-var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested) => {
+var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits) => {
   const queryArgs = {
     updates: {
       type: new import_graphql9.GraphQLNonNull(new import_graphql9.GraphQLList(new import_graphql9.GraphQLNonNull(updateManyInput)))
@@ -5075,7 +5159,8 @@ var generateUpdateMany2 = (db, tableName, table, tables, relationMap, updateMany
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const entries = updates.map(({ where, set }) => {
             const split = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
@@ -5193,7 +5278,8 @@ function generateSchemaData2(db, schema, relations, options) {
     typeNameMapper,
     shouldEagerLoad,
     features,
-    complexity
+    complexity,
+    limits
   } = options;
   const schemaEntries = Object.entries(schema);
   const tableEntries = schemaEntries.filter(([_key, value]) => (0, import_drizzle_orm8.is)(value, import_pg_core2.PgTable));
@@ -5213,7 +5299,8 @@ function generateSchemaData2(db, schema, relations, options) {
     db,
     tables,
     "nulls-largest",
-    filterCtx
+    filterCtx,
+    limits
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -5228,6 +5315,7 @@ function generateSchemaData2(db, schema, relations, options) {
     listRelationFilterCache: /* @__PURE__ */ new Map(),
     aggregateTypeCache: /* @__PURE__ */ new Map(),
     complexity,
+    limits,
     docs: options.docs ?? {},
     features
   };
@@ -5297,7 +5385,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeName,
       typeNameMapper,
       filterCtx,
-      features.distinct
+      features.distinct,
+      limits
     );
     const selectSingleGenerated = generateSelectSingle2(
       db,
@@ -5309,7 +5398,8 @@ function generateSchemaData2(db, schema, relations, options) {
       singleFieldName,
       typeName,
       typeNameMapper,
-      filterCtx
+      filterCtx,
+      limits
     );
     const insertArrGenerated = features.insert ? generateInsertArray2(
       db,
@@ -5323,7 +5413,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       conflictDoNothing,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const insertSingleGenerated = features.insert ? generateInsertSingle2(
       db,
@@ -5337,7 +5428,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       conflictDoNothing,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const uniqueSets = features.upsert ? getUniqueColumnSets(schema[tableName], import_pg_core2.getTableConfig) : [];
     const onConflictInput = features.upsert ? generateOnConflictInput({
@@ -5362,7 +5454,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const upsertSingleGenerated = onConflictInput ? generateUpsert2(
       db,
@@ -5379,7 +5472,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const updateGenerated = features.update ? generateUpdate2(
       db,
@@ -5396,7 +5490,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const updateSingleGenerated = features.update ? generateUpdate2(
       db,
@@ -5413,7 +5508,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const updateManyInput = features.update && features.updateMany ? generateUpdateManyInput({ typeName, updatePrefix: prefixes.update, updateInput, tableFilters }) : void 0;
     const updateManyGenerated = updateManyInput ? generateUpdateMany2(
@@ -5428,7 +5524,8 @@ function generateSchemaData2(db, schema, relations, options) {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const deleteGenerated = features.delete ? generateDelete2(
       db,
@@ -5508,7 +5605,7 @@ function generateSchemaData2(db, schema, relations, options) {
       type: selectArrOutput,
       args: selectArrGenerated.args,
       resolve: selectArrGenerated.resolver,
-      ...complexity ? { extensions: { complexity: listFieldComplexity(complexity) } } : {}
+      ...complexity ? { extensions: { complexity: listFieldComplexity(complexity, limits?.(tableName)) } } : {}
     };
     queries[selectSingleGenerated.name] = {
       type: selectSingleOutput,
@@ -5665,7 +5762,7 @@ var import_drizzle_orm9 = require("drizzle-orm");
 var import_sqlite_core2 = require("drizzle-orm/sqlite-core");
 var import_graphql10 = require("graphql");
 var import_graphql_parse_resolve_info4 = require("graphql-parse-resolve-info");
-var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true) => {
+var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, distinctEnabled = true, limits) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -5673,6 +5770,7 @@ var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filte
     );
   }
   const table = tables[tableName];
+  const limitPolicy = limits?.(tableName);
   const pkNames = sqlitePrimaryKeyPropNames(table);
   const queryArgs = selectArrayArgs(
     orderArgs,
@@ -5695,8 +5793,10 @@ var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filte
           typeNameMapper,
           parsedInfo,
           ...args,
+          limit: applyLimitPolicy(args.limit, limitPolicy, fieldName),
           single: false,
           filterCtx,
+          limits,
           pkNames,
           db: executor,
           // SQLite sorts NULLs as the smallest values (first in ASC).
@@ -5709,7 +5809,7 @@ var generateSelectArray3 = (db, tableName, tables, relationMap, orderArgs, filte
     args: queryArgs
   };
 };
-var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx) => {
+var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filterArgs, fieldName, typeName, typeNameMapper, filterCtx, limits) => {
   const queryBase = db.query[tableName];
   if (!queryBase) {
     throw new Error(
@@ -5737,6 +5837,7 @@ var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filt
           ...args,
           single: true,
           filterCtx,
+          limits,
           pkNames,
           db: executor
         });
@@ -5748,7 +5849,7 @@ var generateSelectSingle3 = (db, tableName, tables, relationMap, orderArgs, filt
   };
 };
 var sqlitePrimaryKeyPropNames = (table) => getPrimaryKeyPropNamesFromConfig(table, import_sqlite_core2.getTableConfig);
-var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested) => {
+var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
   const queryArgs = {
     values: {
       type: new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(baseType)))
@@ -5777,7 +5878,8 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -5805,7 +5907,7 @@ var generateInsertArray3 = (db, tableName, table, tables, relationMap, baseType,
     args: queryArgs
   };
 };
-var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested) => {
+var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType, fieldName, typeName, typeNameMapper, conflictDoNothing = false, txCtx, nested, limits) => {
   const queryArgs = {
     values: {
       type: new import_graphql10.GraphQLNonNull(baseType)
@@ -5831,7 +5933,8 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const returning = nestedEntry ? nested.withJoinColumns(tableName, nestedEntry.ops, { ...columns }, table) : columns;
           const runInsert = async (target, values) => {
@@ -5865,7 +5968,7 @@ var generateInsertSingle3 = (db, tableName, table, tables, relationMap, baseType
     args: queryArgs
   };
 };
-var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested) => {
+var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onConflictType, uniqueSets, fieldName, typeName, single, typeNameMapper, filterCtx, txCtx, nested, limits) => {
   const queryArgs = {
     values: {
       type: single ? new import_graphql10.GraphQLNonNull(baseType) : new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(baseType)))
@@ -5897,7 +6000,8 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const returning = nestedEntries ? nested.withJoinColumns(tableName, mergedOps(nestedEntries), { ...columns }, table) : columns;
           const runUpsert = async (target, values) => {
@@ -5936,7 +6040,7 @@ var generateUpsert3 = (db, tableName, table, tables, relationMap, baseType, onCo
     args: queryArgs
   };
 };
-var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested) => {
+var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filterArgs, fieldName, typeName, single, requireWhere, typeNameMapper, filterCtx, txCtx, nested, limits) => {
   const queryArgs = {
     set: {
       type: new import_graphql10.GraphQLNonNull(setArgs)
@@ -5963,7 +6067,8 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const entry = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
           const nestedOps = entry && nested.hasOps(entry.ops) ? entry.ops : void 0;
@@ -6010,7 +6115,7 @@ var generateUpdate3 = (db, tableName, table, tables, relationMap, setArgs, filte
     args: queryArgs
   };
 };
-var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested) => {
+var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateManyInput, fieldName, typeName, typeNameMapper, filterCtx, txCtx, nested, limits) => {
   const queryArgs = {
     updates: {
       type: new import_graphql10.GraphQLNonNull(new import_graphql10.GraphQLList(new import_graphql10.GraphQLNonNull(updateManyInput)))
@@ -6037,7 +6142,8 @@ var generateUpdateMany3 = (db, tableName, table, tables, relationMap, updateMany
             typeNameMapper,
             table,
             pkNames,
-            parsedInfo
+            parsedInfo,
+            limits
           });
           const entries = updates.map(({ where, set }) => {
             const split = nested?.enabled(tableName) ? nested.split(tableName, set) : void 0;
@@ -6183,7 +6289,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
     typeNameMapper,
     shouldEagerLoad,
     features,
-    complexity
+    complexity,
+    limits
   } = options;
   const rawSchema = schema;
   const schemaEntries = Object.entries(rawSchema);
@@ -6204,7 +6311,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
     db,
     tables,
     "nulls-smallest",
-    filterCtx
+    filterCtx,
+    limits
   );
   const cacheCtx = {
     genericFilterCache: /* @__PURE__ */ new Map(),
@@ -6219,6 +6327,7 @@ var generateSchemaData3 = (db, schema, relations, options) => {
     listRelationFilterCache: /* @__PURE__ */ new Map(),
     aggregateTypeCache: /* @__PURE__ */ new Map(),
     complexity,
+    limits,
     docs: options.docs ?? {},
     features
   };
@@ -6298,7 +6407,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeName,
       typeNameMapper,
       filterCtx,
-      features.distinct
+      features.distinct,
+      limits
     );
     const selectSingleGenerated = generateSelectSingle3(
       db,
@@ -6310,7 +6420,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       singleFieldName,
       typeName,
       typeNameMapper,
-      filterCtx
+      filterCtx,
+      limits
     );
     const insertArrGenerated = features.insert ? generateInsertArray3(
       db,
@@ -6324,7 +6435,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       conflictDoNothing,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const insertSingleGenerated = features.insert ? generateInsertSingle3(
       db,
@@ -6338,7 +6450,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       conflictDoNothing,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const uniqueSets = features.upsert ? getUniqueColumnSets(schema[tableName], import_sqlite_core2.getTableConfig) : [];
     const onConflictInput = features.upsert ? generateOnConflictInput({
@@ -6363,7 +6476,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const upsertSingleGenerated = onConflictInput ? generateUpsert3(
       db,
@@ -6380,7 +6494,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const updateGenerated = features.update ? generateUpdate3(
       db,
@@ -6397,7 +6512,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const updateSingleGenerated = features.update ? generateUpdate3(
       db,
@@ -6414,7 +6530,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const updateManyInput = features.update && features.updateMany ? generateUpdateManyInput({ typeName, updatePrefix: prefixes.update, updateInput, tableFilters }) : void 0;
     const updateManyGenerated = updateManyInput ? generateUpdateMany3(
@@ -6429,7 +6546,8 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       typeNameMapper,
       filterCtx,
       mutationTxCtx,
-      nestedRuntime
+      nestedRuntime,
+      limits
     ) : void 0;
     const deleteGenerated = features.delete ? generateDelete3(
       db,
@@ -6509,7 +6627,7 @@ var generateSchemaData3 = (db, schema, relations, options) => {
       type: selectArrOutput,
       args: selectArrGenerated.args,
       resolve: selectArrGenerated.resolver,
-      ...complexity ? { extensions: { complexity: listFieldComplexity(complexity) } } : {}
+      ...complexity ? { extensions: { complexity: listFieldComplexity(complexity, limits?.(tableName)) } } : {}
     };
     queries[selectSingleGenerated.name] = {
       type: selectSingleOutput,
@@ -6705,6 +6823,33 @@ var buildSchema = (db, config) => {
   };
   const transactionsOpt = config?.transactions;
   const transactions = transactionsOpt === void 0 || transactionsOpt === "none" ? void 0 : { timeoutMs: (transactionsOpt === "auto" ? void 0 : transactionsOpt.timeoutMs) ?? 3e4 };
+  const limitsConfig = config?.limits;
+  if (limitsConfig) {
+    const check = (policy, where) => {
+      for (const key of ["defaultLimit", "maxLimit"]) {
+        const value = policy[key];
+        if (value === void 0) {
+          continue;
+        }
+        if (!Number.isInteger(value) || value < 1) {
+          throw new Error(`Drizzle-GraphQL Error: config.limits${where}.${key} must be a positive integer.`);
+        }
+      }
+    };
+    check(limitsConfig, "");
+    for (const [tableName, policy] of Object.entries(limitsConfig.tables ?? {})) {
+      check(policy, `.tables.${tableName}`);
+    }
+  }
+  const limitPolicyCache = /* @__PURE__ */ new Map();
+  const limits = limitsConfig ? (tableName) => {
+    if (limitPolicyCache.has(tableName)) {
+      return limitPolicyCache.get(tableName);
+    }
+    const resolved = resolveLimitPolicy(limitsConfig, limitsConfig.tables?.[tableName]);
+    limitPolicyCache.set(tableName, resolved);
+    return resolved;
+  } : void 0;
   const eagerOpt = config?.eagerLoadRelations;
   const shouldEagerLoad = eagerOpt === void 0 || eagerOpt === true ? () => true : eagerOpt === false ? () => false : eagerOpt;
   if (!typeNameMapper && suffixes.list === suffixes.single) {
@@ -6737,6 +6882,7 @@ var buildSchema = (db, config) => {
     mapColumnType: config?.mapColumnType,
     enumNameMapper: config?.enumNameMapper,
     transactions,
+    limits,
     docs: {
       describeColumn: config?.describeColumn,
       describeTable: config?.describeTable,