@hypequery/cli 1.13.1 → 1.14.0

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAa9B,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;EAKpE;AA4ND,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAa9B,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;EAKpE;AA8ND,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli.js

@@ -142,6 +142,7 @@ program
     .option('--runtime-output <path>', 'Bundled Node runtime path (default: beside deployment JSON)')
     .option('--entrypoint-prefix <prefix>', 'Runtime entrypoint prefix (default: queries)')
     .option('--hash-output <path>', 'Deployment identity sidecar path (default: <output>.sha256)')
+    .option('--no-source', 'Exclude project source files from the deployment bundle')
     .action(runCommand(async (api, options) => {
     await buildDeploymentCommand(api, options);
 }));
@@ -176,6 +177,7 @@ program
     .option('--project <project>', 'Target project identifier (advanced override)')
     .option('--environment <environment>', 'Target environment identifier (advanced override)')
     .option('--release <path>', 'Submit a prebuilt bundle with this release (legacy)')
+    .option('--no-source', 'Exclude project source files from the deployment bundle')
     .option('--endpoint <url>', 'HTTPS submission endpoint; requires HYPEQUERY_API_TOKEN')
     .action(runCommand(async (source, options) => {
     await deployCommand(source, options);

package/dist/commands/deploy.d.ts

@@ -10,6 +10,7 @@ export interface DeployOptions extends SubmitDeploymentOptions {
     environment?: string;
     bundleOutput?: string;
     releaseOutput?: string;
+    source?: boolean;
 }
 export interface SubmitDeploymentDependencies {
     readonly env?: Readonly<Record<string, string | undefined>>;

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AASA,OAAO,EACL,mCAAmC,EAEnC,KAAK,4BAA4B,EAElC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAChC,MAAM,iBAAiB,CAAC;AAMzB,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAc,SAAQ,uBAAuB;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,mCAAmC,CAAC;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,kBAAmB,SAAQ,4BAA4B;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,sBAAsB,CAAC;IACzD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,+BAA+B,CAAC;IAC3E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,CAAC;CAC5D;AA8GD,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,uBAA4B,EACrC,YAAY,GAAE,4BAAiC,GAC9C,OAAO,CAAC,4BAA4B,CAAC,CAwDvC;AAmDD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,aAAkB,EAC3B,YAAY,GAAE,kBAAuB,GACpC,OAAO,CAAC,4BAA4B,CAAC,CAmDvC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AASA,OAAO,EACL,mCAAmC,EAEnC,KAAK,4BAA4B,EAElC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAChC,MAAM,iBAAiB,CAAC;AAMzB,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAc,SAAQ,uBAAuB;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,mCAAmC,CAAC;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,kBAAmB,SAAQ,4BAA4B;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,sBAAsB,CAAC;IACzD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,+BAA+B,CAAC;IAC3E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,CAAC;CAC5D;AA8GD,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,uBAA4B,EACrC,YAAY,GAAE,4BAAiC,GAC9C,OAAO,CAAC,4BAA4B,CAAC,CAwDvC;AAmDD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,aAAkB,EAC3B,YAAY,GAAE,kBAAuB,GACpC,OAAO,CAAC,4BAA4B,CAAC,CAmDvC"}

package/dist/commands/deploy.js

@@ -204,7 +204,7 @@ export async function deployCommand(sourcePath, options = {}, dependencies = {})
     // a missing or expired login only surfaces after a full bundle build.
     await resolveDeploymentCredential(options.endpoint, dependencies);
     try {
-        await build(sourcePath, { bundleOutput: bundlePath });
+        await build(sourcePath, { bundleOutput: bundlePath, source: options.source });
     }
     catch (error) {
         throw withRuntimeFlagHint(error);

package/dist/commands/deployment.d.ts

@@ -9,6 +9,7 @@ export interface BuildDeploymentOptions {
     runtimeOutput?: string;
     entrypointPrefix?: string;
     hashOutput?: string;
+    source?: boolean;
 }
 export interface PrepareDeploymentReleaseOptions {
     project?: string;

package/dist/commands/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/commands/deployment.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACvC,MAAM,qBAAqB,CAAC;AAc7B,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAI5C,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oCAAoC;IACnD,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC7D;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAoDD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAwIrC;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CA2ErC;AAiED,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,+BAAoC,EAC7C,YAAY,GAAE,oCAAyC,GACtD,OAAO,CAAC,iCAAiC,CAAC,CAkE5C"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/commands/deployment.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACvC,MAAM,qBAAqB,CAAC;AAe7B,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAI5C,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oCAAoC;IACnD,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC7D;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAoDD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAsJrC;AAED,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CA2ErC;AAiED,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,+BAAoC,EAC7C,YAAY,GAAE,oCAAyC,GACtD,OAAO,CAAC,iCAAiC,CAAC,CAkE5C"}

package/dist/commands/deployment.js

@@ -4,6 +4,7 @@ import path from 'node:path';
 import { prepareProtocolDeploymentReleaseEnvelope, prepareProtocolDeploymentContract, } from '@hypequery/protocol';
 import { writeDeploymentBundle, verifyDeploymentBundle, readDeploymentRuntimeFile, } from '../utils/deployment-bundle.js';
 import { buildNodeRuntimeArtifact, getDeploymentRuntimeEntrypoints, } from '../utils/deployment-runtime-artifact.js';
+import { captureDeploymentSourceSnapshot } from '../utils/deployment-source-snapshot.js';
 import { loadApiModule } from '../utils/load-api.js';
 import { logger } from '../utils/logger.js';
 import { loadCloudCredential, } from '../utils/cloud-credential-store.js';
@@ -123,8 +124,15 @@ export async function buildDeploymentCommand(apiPath, options = {}) {
             }
             runtimeFiles.push({ runtime, sha256: actualSha256, bytes });
         }
-        const bundle = await writeDeploymentBundle(bundleOutput, prepared, runtimeFiles);
+        const sourceSnapshot = options.source === false
+            ? undefined
+            : await captureDeploymentSourceSnapshot(apiPath);
+        const bundle = await writeDeploymentBundle(bundleOutput, prepared, runtimeFiles, sourceSnapshot);
         logger.success(`Deployment bundle written to ${bundle.directory}`);
+        if (bundle.manifest.source) {
+            logger.info(`Captured ${bundle.manifest.source.files.length} source `
+                + `${bundle.manifest.source.files.length === 1 ? 'file' : 'files'}`);
+        }
         logger.info(`Bundle identity: ${bundle.identity}`);
         logger.info(`Deployment identity: ${digest}`);
         return validated;

package/dist/utils/deployment-bundle.d.ts

@@ -8,12 +8,25 @@ export interface DeploymentBundleRuntimeFile {
     readonly sha256: string;
     readonly bytes: Uint8Array;
 }
+export interface DeploymentBundleSourceFile {
+    readonly path: string;
+    readonly bytes: Uint8Array;
+}
+export interface DeploymentBundleSourceSnapshot {
+    readonly entrypoint: string;
+    readonly files: readonly DeploymentBundleSourceFile[];
+    readonly revision?: {
+        readonly kind: 'git';
+        readonly commit: string;
+        readonly dirty: boolean;
+    };
+}
 export interface WrittenDeploymentBundle {
     readonly directory: string;
     readonly manifest: ProtocolDeploymentBundleManifest;
     readonly identity: string;
     readonly contract: ProtocolDeploymentContract;
 }
-export declare function writeDeploymentBundle(outputDirectory: string, prepared: PreparedProtocolDeploymentContract, runtimeFiles: readonly DeploymentBundleRuntimeFile[]): Promise<WrittenDeploymentBundle>;
+export declare function writeDeploymentBundle(outputDirectory: string, prepared: PreparedProtocolDeploymentContract, runtimeFiles: readonly DeploymentBundleRuntimeFile[], sourceSnapshot?: DeploymentBundleSourceSnapshot): Promise<WrittenDeploymentBundle>;
 export declare function readDeploymentRuntimeFile(filePath: string): Promise<Uint8Array>;
 //# sourceMappingURL=deployment-bundle.d.ts.map

package/dist/utils/deployment-bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment-bundle.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-bundle.ts"],"names":[],"mappings":"AAYA,OAAO,EAGL,KAAK,kCAAkC,EACvC,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAGtE,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,GACvB,CAAC;AACF,YAAY,EAAE,wBAAwB,EAAE,CAAC;AAEzC,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AA+FD,wBAAsB,qBAAqB,CACzC,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,kCAAkC,EAC5C,YAAY,EAAE,SAAS,2BAA2B,EAAE,GACnD,OAAO,CAAC,uBAAuB,CAAC,CA6ElC;AAoCD,wBAAsB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAMrF"}
+{"version":3,"file":"deployment-bundle.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-bundle.ts"],"names":[],"mappings":"AAYA,OAAO,EAGL,KAAK,kCAAkC,EACvC,KAAK,gCAAgC,EACrC,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAGtE,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,GACvB,CAAC;AACF,YAAY,EAAE,wBAAwB,EAAE,CAAC;AAEzC,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;CAC/C;AA0ID,wBAAsB,qBAAqB,CACzC,eAAe,EAAE,MAAM,EACvB,QAAQ,EAAE,kCAAkC,EAC5C,YAAY,EAAE,SAAS,2BAA2B,EAAE,EACpD,cAAc,CAAC,EAAE,8BAA8B,GAC9C,OAAO,CAAC,uBAAuB,CAAC,CA+FlC;AAoCD,wBAAsB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAMrF"}

package/dist/utils/deployment-bundle.js

@@ -12,6 +12,7 @@ function sha256(bytes) {
 function runtimeArtifactPath(runtime, digest) {
     return `artifacts/${digest}.${runtime === 'node' ? 'mjs' : 'pyz'}`;
 }
+const SOURCE_ROOT = 'source';
 function errorCode(error) {
     return typeof error === 'object' && error !== null && 'code' in error
         ? String(error.code)
@@ -83,12 +84,51 @@ function requireClosedContractArtifactSet(contract) {
         }
     }
 }
-export async function writeDeploymentBundle(outputDirectory, prepared, runtimeFiles) {
+function validateSourceSnapshot(source) {
+    if (!source)
+        return undefined;
+    const files = [...source.files].sort((left, right) => left.path < right.path ? -1 : left.path > right.path ? 1 : 0);
+    if (files.length < 1
+        || files.length > DEFAULT_PROTOCOL_DEPLOYMENT_BUNDLE_LIMITS.maxSourceFiles) {
+        throw new Error('Deployment source snapshot exceeds the bundle file limits.');
+    }
+    let totalBytes = 0;
+    const seen = new Set();
+    for (const file of files) {
+        const portable = file.path.split(path.sep).join('/');
+        if (portable !== file.path || path.isAbsolute(file.path)
+            || file.path.split('/').some(segment => !segment || segment === '.' || segment === '..')) {
+            throw new Error(`Deployment source path must be project-relative: ${file.path}`);
+        }
+        const caseFolded = file.path.toLowerCase();
+        if (seen.has(caseFolded)) {
+            throw new Error(`Duplicate deployment source path: ${file.path}`);
+        }
+        seen.add(caseFolded);
+        if (file.bytes.byteLength > DEFAULT_PROTOCOL_DEPLOYMENT_BUNDLE_LIMITS.maxSourceFileBytes) {
+            throw new Error(`Deployment source file exceeds its byte limit: ${file.path}`);
+        }
+        totalBytes += file.bytes.byteLength;
+    }
+    if (totalBytes > DEFAULT_PROTOCOL_DEPLOYMENT_BUNDLE_LIMITS.maxSourceBytes) {
+        throw new Error('Deployment source snapshot exceeds its total byte limit.');
+    }
+    if (!files.some(file => file.path === source.entrypoint)) {
+        throw new Error('Deployment source snapshot does not contain its API entrypoint.');
+    }
+    return Object.freeze({
+        entrypoint: source.entrypoint,
+        files: Object.freeze(files),
+        ...(source.revision ? { revision: Object.freeze({ ...source.revision }) } : {}),
+    });
+}
+export async function writeDeploymentBundle(outputDirectory, prepared, runtimeFiles, sourceSnapshot) {
     const destination = path.resolve(outputDirectory);
     if (destination === path.parse(destination).root) {
         throw new Error('The deployment bundle output cannot be a filesystem root.');
     }
     const files = validateRuntimeFiles(prepared, runtimeFiles);
+    const source = validateSourceSnapshot(sourceSnapshot);
     const deploymentBytes = utf8Encoder.encode(`${prepared.canonical}\n`);
     const manifestInput = {
         kind: 'hypequery-deployment-bundle',
@@ -105,6 +145,18 @@ export async function writeDeploymentBundle(outputDirectory, prepared, runtimeFi
             sha256: file.sha256,
             byteLength: file.bytes.byteLength,
         })),
+        ...(source ? {
+            source: {
+                root: SOURCE_ROOT,
+                entrypoint: source.entrypoint,
+                files: source.files.map(file => ({
+                    path: file.path,
+                    sha256: sha256(file.bytes),
+                    byteLength: file.bytes.byteLength,
+                })),
+                ...(source.revision ? { revision: source.revision } : {}),
+            },
+        } : {}),
     };
     const preparedManifest = prepareProtocolDeploymentBundleManifest(manifestInput);
     const replaceExisting = await existingVerifiedBundle(destination);
@@ -118,6 +170,11 @@ export async function writeDeploymentBundle(outputDirectory, prepared, runtimeFi
         for (const file of files) {
             await writeFile(path.join(staging, runtimeArtifactPath(file.runtime, file.sha256)), file.bytes, { flag: 'wx' });
         }
+        for (const file of source?.files ?? []) {
+            const outputPath = path.join(staging, SOURCE_ROOT, ...file.path.split('/'));
+            await mkdir(path.dirname(outputPath), { recursive: true });
+            await writeFile(outputPath, file.bytes, { flag: 'wx' });
+        }
         await writeFile(path.join(staging, DEPLOYMENT_BUNDLE_MANIFEST), `${preparedManifest.canonical}\n`, { encoding: 'utf8', flag: 'wx' });
         if (!replaceExisting) {
             await rename(staging, destination);

package/dist/utils/deployment-source-snapshot.d.ts

@@ -0,0 +1,3 @@
+import type { DeploymentBundleSourceSnapshot } from './deployment-bundle.js';
+export declare function captureDeploymentSourceSnapshot(apiPath: string): Promise<DeploymentBundleSourceSnapshot>;
+//# sourceMappingURL=deployment-source-snapshot.d.ts.map

package/dist/utils/deployment-source-snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-source-snapshot.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-source-snapshot.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAEV,8BAA8B,EAC/B,MAAM,wBAAwB,CAAC;AAqEhC,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,8BAA8B,CAAC,CAkDzC"}

package/dist/utils/deployment-source-snapshot.js

@@ -0,0 +1,110 @@
+import { execFile } from 'node:child_process';
+import { constants, lstat, open, realpath } from 'node:fs/promises';
+import path from 'node:path';
+import { DEFAULT_PROTOCOL_DEPLOYMENT_BUNDLE_LIMITS, } from '@hypequery/protocol';
+import { build } from 'esbuild';
+import { findNearestTsconfig } from './load-api.js';
+function portableProjectPath(projectRoot, absolutePath) {
+    const relative = path.relative(projectRoot, absolutePath);
+    if (!relative || relative === '..' || relative.startsWith(`..${path.sep}`)
+        || path.isAbsolute(relative)) {
+        throw new Error('Deployment source files must remain inside the current project.');
+    }
+    return relative.split(path.sep).join('/');
+}
+async function readSourceFile(projectRoot, inputPath) {
+    const absolutePath = path.resolve(projectRoot, inputPath);
+    const displayPath = portableProjectPath(projectRoot, absolutePath);
+    const resolvedPath = await realpath(absolutePath);
+    if (resolvedPath !== absolutePath) {
+        throw new Error(`Deployment source files must not be symbolic links: ${displayPath}`);
+    }
+    const initial = await lstat(absolutePath);
+    if (!initial.isFile() || initial.isSymbolicLink()) {
+        throw new Error(`Deployment source entry is not a regular file: ${displayPath}`);
+    }
+    if (initial.size > DEFAULT_PROTOCOL_DEPLOYMENT_BUNDLE_LIMITS.maxSourceFileBytes) {
+        throw new Error(`Deployment source file exceeds its byte limit: ${displayPath}`);
+    }
+    const handle = await open(absolutePath, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile() || stat.size !== initial.size) {
+            throw new Error(`Deployment source file changed while being read: ${displayPath}`);
+        }
+        return Object.freeze({
+            path: displayPath,
+            bytes: new Uint8Array(await handle.readFile()),
+        });
+    }
+    finally {
+        await handle.close();
+    }
+}
+function gitOutput(projectRoot, arguments_) {
+    return new Promise((resolve) => {
+        execFile('git', [...arguments_], { cwd: projectRoot, encoding: 'utf8', maxBuffer: 1024 * 1024 }, (error, stdout) => resolve(error ? undefined : stdout.trim()));
+    });
+}
+async function sourceRevision(projectRoot) {
+    const commit = await gitOutput(projectRoot, ['rev-parse', 'HEAD']);
+    if (!commit || !/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/.test(commit))
+        return undefined;
+    const status = await gitOutput(projectRoot, ['status', '--porcelain', '--untracked-files=all']);
+    if (status === undefined)
+        return undefined;
+    return Object.freeze({
+        kind: 'git',
+        commit,
+        dirty: status.length > 0,
+    });
+}
+export async function captureDeploymentSourceSnapshot(apiPath) {
+    const projectRoot = await realpath(process.cwd());
+    const entrypointAbsolute = await realpath(path.resolve(projectRoot, apiPath));
+    const entrypoint = portableProjectPath(projectRoot, entrypointAbsolute);
+    let inputs;
+    try {
+        const result = await build({
+            absWorkingDir: projectRoot,
+            bundle: true,
+            entryPoints: [entrypointAbsolute],
+            logLevel: 'silent',
+            metafile: true,
+            packages: 'external',
+            platform: 'node',
+            sourcemap: false,
+            tsconfig: await findNearestTsconfig(entrypointAbsolute) ?? undefined,
+            write: false,
+        });
+        inputs = Object.keys(result.metafile.inputs);
+    }
+    catch (error) {
+        throw new Error(`Could not resolve the deployment source graph from ${apiPath}.\n`
+            + `Original error: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const paths = [...new Set(inputs.map(input => {
+            const absolute = path.resolve(projectRoot, input);
+            const relative = portableProjectPath(projectRoot, absolute);
+            if (relative.split('/').includes('node_modules')) {
+                throw new Error(`Deployment source graph unexpectedly included a dependency: ${relative}`);
+            }
+            return relative;
+        }))].sort();
+    if (!paths.includes(entrypoint))
+        paths.unshift(entrypoint);
+    if (paths.length > DEFAULT_PROTOCOL_DEPLOYMENT_BUNDLE_LIMITS.maxSourceFiles) {
+        throw new Error('Deployment source graph exceeds the bundle file limit.');
+    }
+    const files = await Promise.all(paths.map(file => readSourceFile(projectRoot, file)));
+    const totalBytes = files.reduce((total, file) => total + file.bytes.byteLength, 0);
+    if (totalBytes > DEFAULT_PROTOCOL_DEPLOYMENT_BUNDLE_LIMITS.maxSourceBytes) {
+        throw new Error('Deployment source graph exceeds the bundle byte limit.');
+    }
+    const revision = await sourceRevision(projectRoot);
+    return Object.freeze({
+        entrypoint,
+        files: Object.freeze(files),
+        ...(revision ? { revision } : {}),
+    });
+}

package/dist/utils/deployment-upload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment-upload.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-upload.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAIL,KAAK,yCAAyC,EAC/C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAE1E,YAAY,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAQ1E,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,GACzB,6BAA6B,GAC7B,0BAA0B,GAC1B,mBAAmB,GACnB,oBAAoB,GACpB,4BAA4B,CAAC;AAEjC,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAM9E;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,mBAAmB,KACtB,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAErC,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,MAAM,EAAE,wBAAwB,EAChC,OAAO,EAAE,yCAAyC,GACjD,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC1C;AA+VD,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,oCAAoC,GAC5C,yBAAyB,CAsF3B"}
+{"version":3,"file":"deployment-upload.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-upload.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAIL,KAAK,yCAAyC,EAC/C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAE1E,YAAY,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAQ1E,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,GACzB,6BAA6B,GAC7B,0BAA0B,GAC1B,mBAAmB,GACnB,oBAAoB,GACpB,4BAA4B,CAAC;AAEjC,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAM9E;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,mBAAmB,KACtB,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAErC,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,MAAM,EAAE,wBAAwB,EAChC,OAAO,EAAE,yCAAyC,GACjD,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC1C;AA+WD,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,oCAAoC,GAC5C,yBAAyB,CAsF3B"}

package/dist/utils/deployment-upload.js

@@ -78,6 +78,9 @@ function validateMultipartBundlePaths(bundle) {
     multipartBundlePath(bundle.manifest.deployment.path);
     for (const artifact of bundle.manifest.artifacts)
         multipartBundlePath(artifact.path);
+    for (const source of bundle.manifest.source?.files ?? []) {
+        multipartBundlePath(`${bundle.manifest.source.root}/${source.path}`);
+    }
 }
 function partHeader(boundary, part) {
     const headers = [
@@ -130,6 +133,19 @@ function uploadParts(bundle, release, manifest) {
             byteLength: artifact.byteLength,
             sha256: artifact.sha256,
         })),
+        ...(manifest.manifest.source?.files.map(source => {
+            const bundlePath = `${manifest.manifest.source.root}/${source.path}`;
+            return {
+                kind: 'file',
+                name: 'bundle',
+                filename: path.basename(source.path),
+                contentType: 'application/octet-stream',
+                absolutePath: path.join(root, ...bundlePath.split('/')),
+                bundlePath,
+                byteLength: source.byteLength,
+                sha256: source.sha256,
+            };
+        }) ?? []),
     ]);
 }
 async function* streamVerifiedFile(part) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/cli",
-  "version": "1.13.1",
+  "version": "1.14.0",
   "description": "Command-line interface for hypequery",
   "license": "Apache-2.0",
   "type": "module",
@@ -19,8 +19,8 @@
     "open": "^10.0.0",
     "ora": "^8.0.1",
     "prompts": "^2.4.2",
-    "@hypequery/protocol": "0.9.0",
-    "@hypequery/deployment": "0.6.0"
+    "@hypequery/deployment": "0.7.0",
+    "@hypequery/protocol": "0.10.0"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "1.3.0"
@@ -34,7 +34,7 @@
     "@vitest/coverage-v8": "^3.2.6",
     "typescript": "^5.7.3",
     "vitest": "^3.2.6",
-    "@hypequery/serve": "0.14.0"
+    "@hypequery/serve": "0.14.1"
   },
   "repository": {
     "type": "git",