@hypequery/cli 1.14.0 → 1.15.0

package/README.md

@@ -25,13 +25,6 @@ Or install it once:
 npm install -D @hypequery/cli
 ```
 
-Ship it to Hypequery Cloud:
-
-```bash
-npx @hypequery/cli login
-npx @hypequery/cli deploy analytics/api.ts
-```
-
 ## Commands
 
 ### `hypequery init`
@@ -156,9 +149,9 @@ semantic keys such as `dataset:orders`.
 
 Builds a closed deployment bundle for an exported HypeQuery API. The bundle
 contains canonical deployment metadata, every referenced runtime artifact, and
-a manifest that binds their exact bytes and identities. `hypequery deploy` runs
-this step for you; reach for it directly in CI pipelines that stage artifacts,
-or when you need the runtime options below.
+a manifest that binds their exact bytes and identities. It is the first step of
+a deployment pipeline, and produces the input `deployment:release` binds to a
+target.
 
 ```bash
 npx hypequery deployment:build analytics/api.ts
@@ -200,112 +193,16 @@ are still accepted for metadata-only validation.
 npx hypequery deployment:validate analytics/hypequery-deployment
 ```
 
-### `hypequery login`
-
-Authorizes the local CLI through your existing Hypequery Cloud browser
-session. The command uses an S256 PKCE loopback flow, then stores the
-target-scoped deployment token in the operating-system credential vault.
-Tokens expire after 12 hours.
-
-```bash
-npx hypequery login
-```
-
-Use `--cloud-url <origin>` or `HYPEQUERY_CLOUD_URL` for a self-hosted or local
-Cloud instance. HTTPS is required except for loopback development origins.
-
-Once logged in, `hypequery deploy` automatically uses the stored endpoint and
-token, and resolves the project and environment from the same stored profile.
-The deployment endpoint is returned by Cloud during the token exchange; it is
-the authenticated upload API, not the browser login endpoint. For
-non-interactive CI usage, set both `HYPEQUERY_API_TOKEN` and
-`HYPEQUERY_DEPLOYMENT_ENDPOINT` (or pass `--endpoint`).
-
-Because the CLI also loads a project `.env`, a `HYPEQUERY_API_TOKEN` left there
-takes precedence over the login flow and is rejected unless it is paired with an
-endpoint. Unset it to use `hypequery login`.
-
-Token storage requires an operating-system credential vault (Keychain,
-Credential Manager, or a Secret Service implementation such as
-gnome-keyring/KWallet). Headless environments without one should use
-`HYPEQUERY_API_TOKEN` instead of `hypequery login`.
-
-### `hypequery logout`
-
-Revokes the current Cloud token and removes it from the operating-system
-credential vault:
-
-```bash
-npx hypequery logout
-```
-
-If the stored profile is unreadable, `logout` still removes the local state and
-reports that the token was not revoked; it expires on its own.
-
-### `hypequery deploy`
-
-Builds a deployment bundle from an API module, prepares a target-bound release,
-and submits both. This is the primary Cloud workflow: sign in once, then deploy
-with one command.
-
-```bash
-npx hypequery login
-npx hypequery deploy analytics/api.ts
-```
-
-The bundle is written to `analytics/hypequery-deployment` and the release to
-`analytics/hypequery-deployment.release.json`. The target comes from the stored
-Cloud profile unless you override it:
-
-```bash
-npx hypequery deploy analytics/api.ts \
-  --project my-project \
-  --environment production
-```
-
-The deployment endpoint and token are resolved before the build, so a missing
-or expired login fails immediately rather than after bundling. The credential
-rules are the same as `hypequery deployment:submit` below.
-
-The three steps remain available individually as `deployment:build`,
-`deployment:release`, and `deployment:submit` for CI pipelines that stage
-artifacts, and for the cases `deploy` does not cover: `deploy` always builds the
-runtime artifact itself, so Python deployments and prebuilt runtime artifacts
-(`--runtime`, `--runtime-artifact`, `--runtime-file`) need `deployment:build`.
-
-Options:
-
-- `--project <project>`: target project identifier; defaults to the logged-in
-  target and must be paired with `--environment`
-- `--environment <environment>`: target environment identifier; defaults to the
-  logged-in target and must be paired with `--project`
-- `--bundle-output <directory>`: bundle directory, default
-  `analytics/hypequery-deployment`
-- `--release-output <path>`: release JSON path, default beside the bundle
-- `--endpoint <url>`: HTTPS submission endpoint; requires `HYPEQUERY_API_TOKEN`
-
-> **Deprecated:** `hypequery deploy <bundle> --release <file>` still submits a
-> prebuilt bundle and prints a deprecation warning. Use
-> `hypequery deployment:submit` instead. `--release` cannot be combined with
-> `--project`, `--environment`, `--bundle-output`, or `--release-output`.
-
 ### `hypequery deployment:release`
 
 Prepares a deterministic release request from a verified deployment bundle and
 a project/environment target. This command does not upload, authorize, or
 execute the release.
 
-After `hypequery login` the target is read from the stored Cloud profile, and
-the resolved target is printed alongside the release identity:
-
-```bash
-npx hypequery deployment:release analytics/hypequery-deployment
-```
-
-To target something other than the logged-in project and environment, pass both
-flags. A half-specified override is rejected rather than completed from the
-stored profile, so an unset shell variable fails loudly instead of silently
-retargeting the release:
+Pass the target as both flags. A half-specified target is rejected rather than
+completed from anywhere else, so an unset shell variable fails loudly instead of
+silently retargeting the release. The resolved target is printed alongside the
+release identity:
 
 ```bash
 npx hypequery deployment:release analytics/hypequery-deployment \
@@ -319,36 +216,30 @@ invalidate bundle verification.
 
 Options:
 
-- `--project <project>`: target project identifier; defaults to the logged-in
-  target and must be paired with `--environment`
-- `--environment <environment>`: target environment identifier; defaults to the
-  logged-in target and must be paired with `--project`
+- `--project <project>`: target project identifier; must be paired with
+  `--environment`
+- `--environment <environment>`: target environment identifier; must be paired
+  with `--project`
 - `--output <path>`: release JSON path, default beside the bundle
 
 ### `hypequery deployment:submit`
 
 Submits a verified deployment bundle with an already-prepared target-bound
 release. The command verifies both inputs again, requires their bundle
-identities to match, and streams only the files declared by the bundle. Use it
-when the bundle and release were produced by an earlier pipeline step; for the
-ordinary path, use `hypequery deploy`.
+identities to match, and streams only the files declared by the bundle.
 
 ```bash
 npx hypequery deployment:submit analytics/hypequery-deployment \
   --release analytics/hypequery-deployment.release.json
 ```
 
-For local development, run `hypequery login` first; the CLI reads the endpoint
-and token from its secure Cloud profile. For CI and manual credentials, set
-`HYPEQUERY_API_TOKEN` together with either `--endpoint` or
-`HYPEQUERY_DEPLOYMENT_ENDPOINT`. The CLI never combines one explicit value with
-the other value from the stored profile. Tokens are never accepted as
-command-line arguments, keeping them out of shell history. The submission
-endpoint must not contain credentials or a URL fragment, and must use HTTPS
-except for `127.0.0.1`/`localhost`, which is permitted for local Cloud
-development and warns that the token is sent in cleartext. The release identity
-is sent as the idempotency key, so an unchanged release can be submitted safely
-again.
+Set `HYPEQUERY_API_TOKEN` together with either `--endpoint` or
+`HYPEQUERY_DEPLOYMENT_ENDPOINT`. Tokens are never accepted as command-line
+arguments, keeping them out of shell history. The submission endpoint must not
+contain credentials or a URL fragment, and must use HTTPS except for
+`127.0.0.1`/`localhost`, which is permitted for local development and warns that
+the token is sent in cleartext. The release identity is sent as the idempotency
+key, so an unchanged release can be submitted safely again.
 
 This command submits immutable deployment inputs. Activation, status changes,
 promotion, and rollback remain control-plane operations.

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAa9B,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;EAKpE;AA8ND,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAa9B,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;EAKpE;AA+ND,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli.js

@@ -34,6 +34,7 @@ program
     .command('login')
     .description('Authorize this machine with Hypequery Cloud')
     .option('--cloud-url <url>', 'Cloud origin (or HYPEQUERY_CLOUD_URL)')
+    .option('--no-branch', 'Do not send the current Git branch (or HYPEQUERY_CLI_SEND_BRANCH=0)')
     .action(runCommand(async (options) => {
     await loginCommand(options);
 }));

package/dist/commands/login.d.ts

@@ -1,9 +1,12 @@
 import { deleteCloudCredential, loadCloudCredential, saveCloudCredential } from '../utils/cloud-credential-store.js';
 export interface LoginOptions {
     readonly cloudUrl?: string;
+    /** Commander sets this to false for `--no-branch`. */
+    readonly branch?: boolean;
 }
 export interface LoginDependencies {
     readonly fetch?: typeof fetch;
+    readonly getGitBranch?: () => Promise<string | null>;
     readonly openBrowser?: (url: string) => Promise<unknown>;
     readonly now?: () => number;
     readonly requestTimeoutMs?: number;

package/dist/commands/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,qBAAqB,EACrB,mBAAmB,EAGnB,mBAAmB,EAEpB,MAAM,oCAAoC,CAAC;AAgB5C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACrD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IACzD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAsJD,wBAAsB,YAAY,CAChC,OAAO,GAAE,YAAiB,EAC1B,YAAY,GAAE,iBAAsB,iBAoDrC;AAED,wBAAsB,aAAa,CAAC,YAAY,GAAE,kBAAuB,iBAoCxE"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,qBAAqB,EACrB,mBAAmB,EAGnB,mBAAmB,EAEpB,MAAM,oCAAoC,CAAC;AAiB5C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAaD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACrD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IACzD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAsJD,wBAAsB,YAAY,CAChC,OAAO,GAAE,YAAiB,EAC1B,YAAY,GAAE,iBAAsB,iBAkErC;AAED,wBAAsB,aAAa,CAAC,YAAY,GAAE,kBAAuB,iBAoCxE"}

package/dist/commands/login.js

@@ -3,6 +3,7 @@ import { createServer } from 'node:http';
 import open from 'open';
 import { validateProtocolDeploymentReleaseTarget } from '@hypequery/protocol';
 import { CLOUD_DEPLOYMENT_SCOPE, deleteCloudCredential, loadCloudCredential, normalizeCloudDeploymentEndpoint, normalizeCloudOrigin, saveCloudCredential, } from '../utils/cloud-credential-store.js';
+import { currentGitBranch } from '../utils/git-branch.js';
 import { logger } from '../utils/logger.js';
 const DEFAULT_CLOUD_URL = 'https://cloud.hypequery.com';
 const LOGIN_TIMEOUT_MS = 5 * 60_000;
@@ -16,6 +17,17 @@ const MAX_TOKEN_LIFETIME_MS = 13 * 60 * 60_000;
 // CLI the day Cloud rotates its token format.
 const TOKEN_PATTERN = /^hqdp_[A-Za-z0-9_-]{16,512}$/;
 const utf8Decoder = new TextDecoder('utf-8', { fatal: true });
+/**
+ * Branch names carry internal detail (customer names, embargoed identifiers),
+ * so both an explicit `--no-branch` and the environment variable suppress the
+ * parameter. The flag wins because it is the more specific signal.
+ */
+function branchContextEnabled(options) {
+    if (options.branch === false)
+        return false;
+    const configured = process.env.HYPEQUERY_CLI_SEND_BRANCH?.trim().toLowerCase();
+    return configured !== '0' && configured !== 'false' && configured !== 'no';
+}
 function callbackHtml(success) {
     const title = success ? 'CLI authorized' : 'Authorization failed';
     const message = success
@@ -162,12 +174,20 @@ export async function loginCommand(options = {}, dependencies = {}) {
     const state = randomBytes(24).toString('base64url');
     const verifier = randomBytes(32).toString('base64url');
     const challenge = createHash('sha256').update(verifier).digest('base64url');
+    // Resolve branch context before the loopback listener opens: shelling out to
+    // git should not hold a server socket, and a caller-supplied resolver that
+    // rejects must not leak one.
+    const branch = branchContextEnabled(options)
+        ? await (dependencies.getGitBranch ?? currentGitBranch)()
+        : null;
     const callback = await callbackServer(state, dependencies.timeoutMs ?? LOGIN_TIMEOUT_MS);
     const authorizeUrl = new URL('/cli/authorize', origin);
     authorizeUrl.searchParams.set('redirect_uri', callback.redirectUri);
     authorizeUrl.searchParams.set('code_challenge', challenge);
     authorizeUrl.searchParams.set('code_challenge_method', 'S256');
     authorizeUrl.searchParams.set('state', state);
+    if (branch)
+        authorizeUrl.searchParams.set('branch', branch);
     try {
         logger.info('Opening your browser to authorize Hypequery CLI…');
         await (dependencies.openBrowser ?? open)(authorizeUrl.toString());
@@ -195,6 +215,11 @@ export async function loginCommand(options = {}, dependencies = {}) {
         const credential = tokenResponse(body, origin, (dependencies.now ?? Date.now)());
         await (dependencies.saveCredential ?? saveCloudCredential)(credential);
         logger.success('Logged in to Hypequery Cloud');
+        // Cloud resolves the target, and branch context only expresses intent, so
+        // print what was actually issued rather than what was requested.
+        if (credential.target) {
+            logger.info(`Deployments target ${credential.target.project} / ${credential.target.environment}`);
+        }
         logger.info(`Credential expires ${new Date(credential.expiresAt).toLocaleString()}`);
     }
     finally {

package/dist/utils/deployment-runtime-artifact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment-runtime-artifact.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-runtime-artifact.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AASD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CA6BjF;AAuDD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,SAAS,MAAM,EAAE,EACrC,gBAAgB,SAAY,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAmD9B"}
+{"version":3,"file":"deployment-runtime-artifact.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-runtime-artifact.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AASD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,MAAM,EAAE,CA6BjF;AAiED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,SAAS,MAAM,EAAE,EACrC,gBAAgB,SAAY,GAC3B,OAAO,CAAC,mBAAmB,CAAC,CAmD9B"}

package/dist/utils/deployment-runtime-artifact.js

@@ -69,15 +69,25 @@ function runtimeEntrySource(apiSpecifier, runtimeEntrypoints, entrypointPrefix)
         '      ...(argument.context === undefined ? {} : { context: argument.context }),',
         '      ...(argument.request === undefined ? {} : { request: argument.request }),',
         '      ...(argument.requestId === undefined ? {} : { requestId: argument.requestId }),',
+        // A null principal means "no trusted principal"; forwarding it would skip the
+        // API's own auth strategies instead of falling through to them.
+        '      ...(argument.trustedAuth == null ? {} : { trustedAuth: argument.trustedAuth }),',
         '    });',
         '  }',
         '  const entry = api.queries?.[name];',
         '  const query = entry?.query;',
-        '  if (typeof query === "function") return query;',
-        '  if (query && typeof query === "object" && typeof query.run === "function") {',
-        '    return query.run.bind(query);',
-        '  }',
-        '  throw new Error(`Runtime entrypoint ${name} is unavailable.`);',
+        '  let run;',
+        '  if (typeof query === "function") run = query;',
+        '  else if (query && typeof query === "object" && typeof query.run === "function") run = query.run.bind(query);',
+        '  if (!run) throw new Error(`Runtime entrypoint ${name} is unavailable.`);',
+        '  // Without a Serve execute() pipeline there is nothing to enforce roles, scopes,',
+        '  // or tenancy, so refuse a trusted principal instead of silently ignoring it.',
+        '  return (argument = {}) => {',
+        '    if (argument?.trustedAuth != null) {',
+        '      throw new Error(`Runtime entrypoint ${name} cannot enforce a trusted principal without a Serve execute() pipeline.`);',
+        '    }',
+        '    return run(argument);',
+        '  };',
         '};',
         `const runtimeEntries = Object.freeze(Object.fromEntries(${names}.map(name => [name, resolveQuery(name)])));`,
         `export const ${prefix[0]} = ${registryExpression};`,

package/dist/utils/git-branch.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolves the checked-out branch name, or null when there isn't one.
+ *
+ * `git symbolic-ref` exits non-zero on a detached HEAD and outside a
+ * repository, and the binary may be missing entirely, so every failure mode
+ * collapses to "no branch context" rather than an error the caller must handle.
+ */
+export declare function currentGitBranch(cwd?: string): Promise<string | null>;
+//# sourceMappingURL=git-branch.d.ts.map

package/dist/utils/git-branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-branch.d.ts","sourceRoot":"","sources":["../../src/utils/git-branch.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiBxB"}

package/dist/utils/git-branch.js

@@ -0,0 +1,26 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+const GIT_TIMEOUT_MS = 5_000;
+/**
+ * Resolves the checked-out branch name, or null when there isn't one.
+ *
+ * `git symbolic-ref` exits non-zero on a detached HEAD and outside a
+ * repository, and the binary may be missing entirely, so every failure mode
+ * collapses to "no branch context" rather than an error the caller must handle.
+ */
+export async function currentGitBranch(cwd = process.cwd()) {
+    try {
+        const { stdout } = await execFileAsync('git', ['symbolic-ref', '--quiet', '--short', 'HEAD'], {
+            cwd,
+            encoding: 'utf8',
+            timeout: GIT_TIMEOUT_MS,
+            windowsHide: true,
+        });
+        const branch = stdout.trim();
+        return branch.length > 0 ? branch : null;
+    }
+    catch {
+        return null;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/cli",
-  "version": "1.14.0",
+  "version": "1.15.0",
   "description": "Command-line interface for hypequery",
   "license": "Apache-2.0",
   "type": "module",
@@ -34,7 +34,7 @@
     "@vitest/coverage-v8": "^3.2.6",
     "typescript": "^5.7.3",
     "vitest": "^3.2.6",
-    "@hypequery/serve": "0.14.1"
+    "@hypequery/serve": "0.15.0"
   },
   "repository": {
     "type": "git",