@hypequery/cli 1.20.0 → 1.21.0

package/README.md

@@ -18,8 +18,29 @@ For a semantic layer:
 
 ```bash
 npx hypequery init --style datasets
+npx hypequery login
+npx hypequery deploy analytics/cloud.ts
 ```
 
+The dataset scaffold writes `analytics/cloud.ts` alongside the local
+`analytics/api.ts`. Its Cloud publication is explicit:
+
+```ts
+import { publishToCloud } from '@hypequery/datasets';
+import { datasets } from './datasets.js';
+
+export const cloud = publishToCloud({
+  datasets,
+  access: { roles: [], scopes: [] },
+});
+```
+
+`api.ts` remains the local Serve entrypoint. Cloud deployment builds from
+`cloud.ts` and does not load Serve configuration. This first Cloud publisher
+accepts datasets only; it rejects named metrics rather than dropping them.
+The required access policy makes the authenticated roles and scopes visible
+before an existing project moves away from Serve-based publishing.
+
 For embedded analytics without a ClickHouse server:
 
 ```bash
@@ -38,7 +59,7 @@ npx hypequery init \
 | `hypequery generate:datasets` | Dataset definitions scaffolded from tables |
 | `hypequery generate:manifest` | A browser-safe route manifest for React hooks |
 | `hypequery login` | An authenticated Cloud target |
-| `hypequery deploy` | A verified deployment of the analytics API |
+| `hypequery deploy analytics/cloud.ts` | A verified dataset-only Cloud deployment |
 | `hypequery pull` / `diff` | Live source inspection and comparison |
 
 Non-interactive ClickHouse commands read `CLICKHOUSE_URL`, `CLICKHOUSE_DATABASE`, `CLICKHOUSE_USERNAME`, and `CLICKHOUSE_PASSWORD`.

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAa9B,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;EAKpE;AA6QD,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiCpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAa9B,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;EAKpE;AAqQD,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/cli.js

@@ -167,13 +167,12 @@ program
     await generateManifestCommand(api, options);
 }));
 program
-    .command('deployment:build <api>')
-    .description('Build a verified deployment bundle')
+    .command('deployment:build <cloud>')
+    .description('Build a verified dataset-only Cloud deployment bundle')
     .option('--bundle-output <directory>', 'Bundle directory (default: analytics/hypequery-deployment)')
     .option('--no-source', 'Exclude project source files from the deployment bundle')
-    .option('--allow-unsupported-config', 'Deploy even though some Serve config will not be honoured in Cloud')
-    .action(runCommand(async (api, options) => {
-    await buildDeploymentCommand(api, options);
+    .action(runCommand(async (cloud, options) => {
+    await buildDeploymentCommand(cloud, options);
 }));
 program
     .command('deployment:validate <artifact>')
@@ -201,7 +200,7 @@ program
 }));
 program
     .command('deploy <source>')
-    .description('Build, prepare, and deploy a Hypequery API module')
+    .description('Build, prepare, and deploy a dataset-only Cloud publication')
     .option('--bundle-output <directory>', 'Bundle directory (default: analytics/hypequery-deployment)')
     .option('--release-output <path>', 'Release JSON path (default: beside the bundle)')
     .option('--project <project>', 'Target project identifier (advanced override)')
@@ -209,7 +208,6 @@ program
     .option('--no-source', 'Exclude project source files from the deployment bundle')
     .option('--endpoint <url>', 'HTTPS submission endpoint; requires HYPEQUERY_API_TOKEN')
     .option('--replace-restored', 'Intentionally replace a restored live release')
-    .option('--allow-unsupported-config', 'Deploy even though some Serve config will not be honoured in Cloud')
     .action(runCommand(async (source, options) => {
     await deployCommand(source, options);
 }));
@@ -245,9 +243,9 @@ program.on('--help', () => {
     console.log('  hypequery generate:types --output analytics/schema.ts');
     console.log('  hypequery generate:datasets');
     console.log('  hypequery generate:manifest analytics/api.ts --output analytics/hypequery-manifest.json');
-    console.log('  hypequery deploy analytics/api.ts');
-    console.log('  hypequery deploy analytics/api.ts --project my-project --environment production');
-    console.log('  hypequery deployment:build analytics/api.ts');
+    console.log('  hypequery deploy analytics/cloud.ts');
+    console.log('  hypequery deploy analytics/cloud.ts --project my-project --environment production');
+    console.log('  hypequery deployment:build analytics/cloud.ts');
     console.log('  hypequery deployment:validate analytics/hypequery-deployment');
     console.log('  hypequery deployment:release analytics/hypequery-deployment --project my-project --environment production');
     console.log('  hypequery deployment:submit analytics/hypequery-deployment --release analytics/hypequery-deployment.release.json');

package/dist/commands/deploy.d.ts

@@ -15,7 +15,6 @@ export interface DeployOptions {
     bundleOutput?: string;
     releaseOutput?: string;
     source?: boolean;
-    allowUnsupportedConfig?: boolean;
 }
 export interface SubmitDeploymentDependencies {
     readonly env?: Readonly<Record<string, string | undefined>>;

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AASA,OAAO,EACL,mCAAmC,EAEnC,KAAK,4BAA4B,EAElC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAChC,MAAM,iBAAiB,CAAC;AAMzB,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,mCAAmC,CAAC;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,mBAAmB,CAAC;CACjD;AAED,MAAM,WAAW,kBAAmB,SAAQ,4BAA4B;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,sBAAsB,CAAC;IACzD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,+BAA+B,CAAC;IAC3E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,CAAC;CAC5D;AA4DD,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,uBAA4B,EACrC,YAAY,GAAE,4BAAiC,GAC9C,OAAO,CAAC,4BAA4B,CAAC,CA0EvC;AAsBD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,aAAkB,EAC3B,YAAY,GAAE,kBAAuB,GACpC,OAAO,CAAC,4BAA4B,CAAC,CAwCvC"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AASA,OAAO,EACL,mCAAmC,EAEnC,KAAK,4BAA4B,EAElC,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAChC,MAAM,iBAAiB,CAAC;AAMzB,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC5D,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,mCAAmC,CAAC;IACtE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,mBAAmB,CAAC;CACjD;AAED,MAAM,WAAW,kBAAmB,SAAQ,4BAA4B;IACtE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,sBAAsB,CAAC;IACzD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,+BAA+B,CAAC;IAC3E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,CAAC;CAC5D;AA4DD,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,uBAA4B,EACrC,YAAY,GAAE,4BAAiC,GAC9C,OAAO,CAAC,4BAA4B,CAAC,CA0EvC;AAsBD,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,aAAkB,EAC3B,YAAY,GAAE,kBAAuB,GACpC,OAAO,CAAC,4BAA4B,CAAC,CAuCvC"}

package/dist/commands/deploy.js

@@ -123,7 +123,7 @@ export async function submitDeploymentCommand(bundlePath, options = {}, dependen
     return result;
 }
 /**
- * `deploy` takes an API module, but the deprecated form took a bundle
+ * `deploy` takes a Cloud publication module, but the deprecated form took a bundle
  * directory. Dropping `--release` from an existing script would otherwise hand
  * a bundle to the module loader and fail inside esbuild.
  */
@@ -135,15 +135,15 @@ async function rejectBundleDirectorySource(sourcePath) {
         return;
     }
     throw new Error(`Cannot deploy a prebuilt bundle directory: ${sourcePath}\n\n`
-        + '`hypequery deploy` takes the API module to build, for example '
-        + '`hypequery deploy analytics/api.ts`.\n'
+        + '`hypequery deploy` takes a Cloud publication module, for example '
+        + '`hypequery deploy analytics/cloud.ts`.\n'
         + 'To upload this bundle, use `hypequery deployment:submit '
         + `${sourcePath} --release <file>\`.`);
 }
 export async function deployCommand(sourcePath, options = {}, dependencies = {}) {
     if (!sourcePath) {
-        throw new Error('Missing API module path.\n\n'
-            + 'Usage: hypequery deploy analytics/api.ts');
+        throw new Error('Missing Cloud publication module path.\n\n'
+            + 'Usage: hypequery deploy analytics/cloud.ts');
     }
     await rejectBundleDirectorySource(sourcePath);
     const bundlePath = options.bundleOutput ?? DEFAULT_BUNDLE_PATH;
@@ -159,7 +159,6 @@ export async function deployCommand(sourcePath, options = {}, dependencies = {})
     await build(sourcePath, {
         bundleOutput: bundlePath,
         source: options.source,
-        allowUnsupportedConfig: options.allowUnsupportedConfig,
     });
     await prepareRelease(bundlePath, {
         project: options.project,

package/dist/commands/deployment.d.ts

@@ -3,7 +3,6 @@ import { type StoredCloudCredential } from '../utils/cloud-credential-store.js';
 export interface BuildDeploymentOptions {
     bundleOutput?: string;
     source?: boolean;
-    allowUnsupportedConfig?: boolean;
 }
 export interface PrepareDeploymentReleaseOptions {
     project?: string;
@@ -18,7 +17,7 @@ export interface PrepareDeploymentReleaseDependencies {
      */
     outputFlagLabel?: string;
 }
-export declare function buildDeploymentCommand(apiPath: string | undefined, options?: BuildDeploymentOptions): Promise<ProtocolDeploymentContract>;
+export declare function buildDeploymentCommand(sourcePath: string | undefined, options?: BuildDeploymentOptions): Promise<ProtocolDeploymentContract>;
 export declare function validateDeploymentCommand(artifactPath: string | undefined): Promise<ProtocolDeploymentContract>;
 export declare function prepareDeploymentReleaseCommand(bundlePath: string | undefined, options?: PrepareDeploymentReleaseOptions, dependencies?: PrepareDeploymentReleaseDependencies): Promise<ProtocolDeploymentReleaseEnvelope>;
 //# sourceMappingURL=deployment.d.ts.map

package/dist/commands/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/commands/deployment.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACvC,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oCAAoC;IACnD,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC7D;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAYD,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAyCrC;AAUD,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAqErC;AAiED,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,+BAAoC,EAC7C,YAAY,GAAE,oCAAyC,GACtD,OAAO,CAAC,iCAAiC,CAAC,CAkE5C"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../src/commands/deployment.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,EACvC,MAAM,qBAAqB,CAAC;AAQ7B,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oCAAoC;IACnD,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAC7D;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAkCrC;AAUD,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAqErC;AAiED,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,+BAAoC,EAC7C,YAAY,GAAE,oCAAyC,GACtD,OAAO,CAAC,iCAAiC,CAAC,CAkE5C"}

package/dist/commands/deployment.js

@@ -3,31 +3,26 @@ import path from 'node:path';
 import { prepareProtocolDeploymentReleaseEnvelope, prepareProtocolDeploymentContract, } from '@hypequery/protocol';
 import { writeDeploymentBundle, verifyDeploymentBundle, } from '../utils/deployment-bundle.js';
 import { captureDeploymentSourceSnapshot } from '../utils/deployment-source-snapshot.js';
-import { loadApiModule } from '../utils/load-api.js';
+import { loadCloudPublication } from '../utils/load-cloud-publication.js';
 import { logger } from '../utils/logger.js';
-import { reportCloudDiagnostic } from '../utils/cloud-diagnostic.js';
 import { loadCloudCredential, } from '../utils/cloud-credential-store.js';
 const DEFAULT_BUNDLE_OUTPUT = 'analytics/hypequery-deployment';
-export async function buildDeploymentCommand(apiPath, options = {}) {
-    if (!apiPath) {
-        throw new Error('Missing API module path.\n\n'
-            + 'Usage: hypequery deployment:build analytics/api.ts');
+export async function buildDeploymentCommand(sourcePath, options = {}) {
+    if (!sourcePath) {
+        throw new Error('Missing Cloud publication module path.\n\n'
+            + 'Usage: hypequery deployment:build analytics/cloud.ts');
     }
     const bundleOutput = options.bundleOutput ?? DEFAULT_BUNDLE_OUTPUT;
-    const api = await loadApiModule(apiPath);
-    if (typeof api.deploymentContract !== 'function') {
-        throw new Error(`Invalid API module: ${apiPath}\n\n`
-            + 'The exported API must provide deploymentContract(). '
-            + 'Upgrade @hypequery/serve and export the value returned by createAPI() or serve().');
-    }
-    const contract = api.deploymentContract({
-        ...(options.allowUnsupportedConfig ? { allowUnsupportedConfig: true } : {}),
-        onCloudDiagnostic: diagnostic => reportCloudDiagnostic(diagnostic, options.allowUnsupportedConfig === true),
-    });
+    const contract = await loadCloudPublication(sourcePath);
+    const candidate = contract;
+    if ((Array.isArray(candidate.queries) && candidate.queries.length > 0)
+        || (Array.isArray(candidate.artifacts) && candidate.artifacts.length > 0)) {
+        throw new Error('Cloud publication modules may publish datasets only.');
+    }
     const prepared = prepareProtocolDeploymentContract(contract);
     const sourceSnapshot = options.source === false
         ? undefined
-        : await captureDeploymentSourceSnapshot(apiPath);
+        : await captureDeploymentSourceSnapshot(sourcePath);
     const bundle = await writeDeploymentBundle(bundleOutput, prepared, sourceSnapshot);
     logger.success(`Deployment bundle written to ${bundle.directory}`);
     if (bundle.manifest.source) {

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAIA,OAAO,EAcL,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAe7B,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAWzF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAqKD,wBAAsB,WAAW,CAAC,OAAO,GAAE,WAAgB,iBAkb1D"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAIA,OAAO,EAcL,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAe7B,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAYzF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,IAAI,CAAC,EAAE,gBAAgB,CAAC;CACzB;AAqKD,wBAAsB,WAAW,CAAC,OAAO,GAAE,WAAgB,iBAsb1D"}

package/dist/commands/init.js

@@ -10,6 +10,7 @@ import { generateEnvTemplate, appendToEnv } from '../templates/env.js';
 import { generateClientTemplate } from '../templates/client.js';
 import { generateQueriesTemplate } from '../templates/queries.js';
 import { generateApiTemplate } from '../templates/api.js';
+import { generateCloudTemplate } from '../templates/cloud.js';
 import { CONTEXT_AUTH_TENANT_COLUMN } from '../templates/auth-scaffold.js';
 import { generateDatasetsPlaceholderTemplate } from '../templates/datasets.js';
 import { appendToGitignore } from '../templates/gitignore.js';
@@ -234,6 +235,7 @@ export async function initCommand(options = {}) {
             ? [
                 path.join(resolvedOutputDir, 'datasets.ts'),
                 path.join(resolvedOutputDir, 'api.ts'),
+                path.join(resolvedOutputDir, 'cloud.ts'),
             ]
             : [
                 path.join(resolvedOutputDir, 'queries.ts'),
@@ -421,6 +423,9 @@ export interface IntrospectedSchema {
         apiPath = path.join(resolvedOutputDir, 'api.ts');
         await writeFile(apiPath, generateApiTemplate({ auth }));
         logger.success(`Created API file (${path.relative(process.cwd(), apiPath)})`);
+        const cloudPath = path.join(resolvedOutputDir, 'cloud.ts');
+        await writeFile(cloudPath, generateCloudTemplate());
+        logger.success(`Created Cloud publication (${path.relative(process.cwd(), cloudPath)})`);
     }
     else {
         apiPath = path.join(resolvedOutputDir, 'queries.ts');

package/dist/templates/cloud.d.ts

@@ -0,0 +1,3 @@
+/** Generate the explicit Cloud publication entrypoint for dataset projects. */
+export declare function generateCloudTemplate(): string;
+//# sourceMappingURL=cloud.d.ts.map

package/dist/templates/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../src/templates/cloud.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wBAAgB,qBAAqB,IAAI,MAAM,CAS9C"}

package/dist/templates/cloud.js

@@ -0,0 +1,11 @@
+/** Generate the explicit Cloud publication entrypoint for dataset projects. */
+export function generateCloudTemplate() {
+    return `import { publishToCloud } from '@hypequery/datasets';
+import { datasets } from './datasets.js';
+
+export const cloud = publishToCloud({
+  datasets,
+  access: { roles: [], scopes: [] },
+});
+`;
+}

package/dist/utils/load-cloud-publication.d.ts

@@ -0,0 +1,4 @@
+import type { ProtocolDeploymentContract } from '@hypequery/protocol';
+/** Load the explicit dataset contract exported by a Cloud publication module. */
+export declare function loadCloudPublication(sourcePath: string): Promise<ProtocolDeploymentContract>;
+//# sourceMappingURL=load-cloud-publication.d.ts.map

package/dist/utils/load-cloud-publication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-cloud-publication.d.ts","sourceRoot":"","sources":["../../src/utils/load-cloud-publication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAGtE,iFAAiF;AACjF,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAYlG"}

package/dist/utils/load-cloud-publication.js

@@ -0,0 +1,13 @@
+import { loadModule } from './load-api.js';
+/** Load the explicit dataset contract exported by a Cloud publication module. */
+export async function loadCloudPublication(sourcePath) {
+    const module = await loadModule(sourcePath);
+    const cloud = module.cloud ?? module.default;
+    if (typeof cloud !== 'object' || cloud === null
+        || !('kind' in cloud) || cloud.kind !== 'hypequery-deployment') {
+        throw new Error(`Invalid Cloud publication: ${sourcePath}\n\n`
+            + 'Export `cloud = publishToCloud({ datasets, access })` from @hypequery/datasets. '
+            + 'A Serve API is not a Cloud publication.');
+    }
+    return cloud;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/cli",
-  "version": "1.20.0",
+  "version": "1.21.0",
   "description": "CLI for scaffolding type-safe ClickHouse analytics, semantic datasets, React manifests, and deployments",
   "keywords": [
     "clickhouse",
@@ -30,8 +30,8 @@
     "open": "^10.0.0",
     "ora": "^8.0.1",
     "prompts": "^2.4.2",
-    "@hypequery/deployment": "0.9.0",
-    "@hypequery/protocol": "0.14.0"
+    "@hypequery/deployment": "0.9.1",
+    "@hypequery/protocol": "0.15.0"
   },
   "optionalDependencies": {
     "@napi-rs/keyring": "1.3.0"
@@ -51,8 +51,8 @@
     "@vitest/coverage-v8": "^3.2.6",
     "typescript": "^5.7.3",
     "vitest": "^3.2.6",
-    "@hypequery/mcp": "0.8.1",
-    "@hypequery/serve": "0.18.0"
+    "@hypequery/mcp": "0.8.2",
+    "@hypequery/serve": "0.19.0"
   },
   "repository": {
     "type": "git",

package/dist/utils/cloud-diagnostic.d.ts

@@ -1,10 +0,0 @@
-export interface CloudCompatibilityDiagnosticLike {
-    readonly severity: 'error' | 'warning';
-    readonly code: string;
-    readonly subject: string;
-    readonly message: string;
-    readonly remedy: string;
-}
-/** Report warnings and explicitly overridden errors before submitting a release. */
-export declare function reportCloudDiagnostic(diagnostic: CloudCompatibilityDiagnosticLike, allowUnsupportedConfig: boolean): void;
-//# sourceMappingURL=cloud-diagnostic.d.ts.map

package/dist/utils/cloud-diagnostic.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cloud-diagnostic.d.ts","sourceRoot":"","sources":["../../src/utils/cloud-diagnostic.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,gCAAgC,EAC5C,sBAAsB,EAAE,OAAO,GAC9B,IAAI,CAMN"}

package/dist/utils/cloud-diagnostic.js

@@ -1,10 +0,0 @@
-import { logger } from './logger.js';
-/** Report warnings and explicitly overridden errors before submitting a release. */
-export function reportCloudDiagnostic(diagnostic, allowUnsupportedConfig) {
-    // Blocking errors are reported by the contract builder's exception.
-    if (diagnostic.severity === 'error' && !allowUnsupportedConfig)
-        return;
-    logger.warn(`${diagnostic.code} (${diagnostic.subject})`);
-    logger.indent(diagnostic.message);
-    logger.indent(`→ ${diagnostic.remedy}`);
-}