@hypequery/cli 1.26.0 → 1.28.0

package/dist/utils/clickhouse-dimension-type.d.ts

@@ -0,0 +1,27 @@
+/** A dataset dimension type the scaffolder can emit. */
+export type ScaffoldDimensionType = 'string' | 'number' | 'boolean' | 'timestamp';
+export interface NamedTupleElement {
+    name: string;
+    type: ScaffoldDimensionType;
+}
+/**
+ * The value type behind `Nullable`, `LowCardinality` and
+ * `SimpleAggregateFunction(fn, T)` wrappers; none changes what a value is.
+ */
+export declare function unwrapClickHouseType(type: string): string;
+/**
+ * Maps a ClickHouse column type to a dataset dimension type, or null when no
+ * scalar dimension type describes its values (Array, Tuple, Map, geo, JSON,
+ * Interval, ...). The outer type name is matched exactly: a substring match
+ * reads `Point` or `Array(Int32)` as numbers. Mirrors Cloud's `protocolTypeOf`
+ * so a table scaffolds with the same field types in both.
+ */
+export declare function clickHouseDimensionType(type: string): ScaffoldDimensionType | null;
+/**
+ * The scalar elements of a named `Tuple(name T, ...)` column, each of which can
+ * be its own dimension through `tupleElement`. Null for any other type,
+ * including unnamed tuples, whose positions carry no meaning to name a field
+ * after. Elements without a scalar type or a plain identifier name are left out.
+ */
+export declare function namedTupleElements(type: string): NamedTupleElement[] | null;
+//# sourceMappingURL=clickhouse-dimension-type.d.ts.map

package/dist/utils/clickhouse-dimension-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clickhouse-dimension-type.d.ts","sourceRoot":"","sources":["../../src/utils/clickhouse-dimension-type.ts"],"names":[],"mappings":"AAEA,wDAAwD;AACxD,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAElF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,qBAAqB,CAAC;CAC7B;AAID;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASzD;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAOlF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,GAAG,IAAI,CAgB3E"}

package/dist/utils/clickhouse-dimension-type.js

@@ -0,0 +1,61 @@
+import { matchTypeCall } from './clickhouse-type-utils.js';
+const IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * The value type behind `Nullable`, `LowCardinality` and
+ * `SimpleAggregateFunction(fn, T)` wrappers; none changes what a value is.
+ */
+export function unwrapClickHouseType(type) {
+    let current = type.trim();
+    const simple = /^SimpleAggregateFunction\(\s*[A-Za-z_][A-Za-z0-9_]*\s*,\s*(.+)\)$/s.exec(current);
+    if (simple)
+        current = simple[1].trim();
+    for (;;) {
+        const wrapped = /^(?:Nullable|LowCardinality)\((.*)\)$/s.exec(current);
+        if (!wrapped)
+            return current;
+        current = wrapped[1].trim();
+    }
+}
+/**
+ * Maps a ClickHouse column type to a dataset dimension type, or null when no
+ * scalar dimension type describes its values (Array, Tuple, Map, geo, JSON,
+ * Interval, ...). The outer type name is matched exactly: a substring match
+ * reads `Point` or `Array(Int32)` as numbers. Mirrors Cloud's `protocolTypeOf`
+ * so a table scaffolds with the same field types in both.
+ */
+export function clickHouseDimensionType(type) {
+    const value = unwrapClickHouseType(type);
+    if (/^(?:U?Int\d+|Float\d+|Decimal\d*)(?:\(.*\))?$/s.test(value))
+        return 'number';
+    if (/^(?:Date|Date32|DateTime|DateTime64)(?:\(.*\))?$/s.test(value))
+        return 'timestamp';
+    if (value === 'Bool')
+        return 'boolean';
+    if (/^(?:String|FixedString|UUID|Enum\d*|IPv4|IPv6)(?:\(.*\))?$/s.test(value))
+        return 'string';
+    return null;
+}
+/**
+ * The scalar elements of a named `Tuple(name T, ...)` column, each of which can
+ * be its own dimension through `tupleElement`. Null for any other type,
+ * including unnamed tuples, whose positions carry no meaning to name a field
+ * after. Elements without a scalar type or a plain identifier name are left out.
+ */
+export function namedTupleElements(type) {
+    const parts = matchTypeCall(unwrapClickHouseType(type), 'Tuple');
+    if (!parts?.length)
+        return null;
+    const elements = [];
+    for (const part of parts) {
+        const named = /^(\S+)\s+(.+)$/s.exec(part);
+        // Element types never contain top-level whitespace before their first
+        // `(`, so a part without a name-then-space prefix is an unnamed element.
+        if (!named || named[1].includes('('))
+            return null;
+        const elementType = clickHouseDimensionType(named[2]);
+        if (IDENTIFIER.test(named[1]) && elementType) {
+            elements.push({ name: named[1], type: elementType });
+        }
+    }
+    return elements;
+}

package/dist/utils/clickhouse-type-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"clickhouse-type-utils.d.ts","sourceRoot":"","sources":["../../src/utils/clickhouse-type-utils.ts"],"names":[],"mappings":"AAAA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA+CzD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG3E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAGzE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,UASpD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,WAE7C"}
+{"version":3,"file":"clickhouse-type-utils.d.ts","sourceRoot":"","sources":["../../src/utils/clickhouse-type-utils.ts"],"names":[],"mappings":"AAAA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAqDzD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG3E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAGzE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,UASpD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,WAE7C"}

package/dist/utils/clickhouse-type-utils.js

@@ -3,10 +3,18 @@ export function splitTopLevelArgs(value) {
     let current = '';
     let depth = 0;
     let quote = null;
+    let escaped = false;
     for (const char of value) {
         if (quote) {
             current += char;
-            if (char === quote) {
+            // ClickHouse escapes a quote inside a literal with a backslash (`'can\'t'`).
+            if (escaped) {
+                escaped = false;
+            }
+            else if (char === '\\') {
+                escaped = true;
+            }
+            else if (char === quote) {
                 quote = null;
             }
             continue;

package/dist/utils/client-contract-file.d.ts

@@ -3,4 +3,9 @@ export declare function checkClientOutputPath(filePath: string): Promise<void>;
 /** Bound allocation before reading; O_NOFOLLOW also refuses a swapped final symlink. */
 export declare function readClientArtifact(filePath: string, maxBytes?: number): Promise<string>;
 export declare function readClientOutput(filePath: string): Promise<string | undefined>;
+/**
+ * Say where a client contract is invalid. An unknown field usually means the
+ * contract was exported by a newer hypequery than this CLI understands.
+ */
+export declare function describeClientContractError(error: unknown): unknown;
 //# sourceMappingURL=client-contract-file.d.ts.map

package/dist/utils/client-contract-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-contract-file.d.ts","sourceRoot":"","sources":["../../src/utils/client-contract-file.ts"],"names":[],"mappings":"AAIA,qFAAqF;AACrF,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe3E;AAED,wFAAwF;AACxF,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBhG;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAMpF"}
+{"version":3,"file":"client-contract-file.d.ts","sourceRoot":"","sources":["../../src/utils/client-contract-file.ts"],"names":[],"mappings":"AAMA,qFAAqF;AACrF,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB3E;AAsBD,wFAAwF;AACxF,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBhG;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAMpF;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQnE"}

package/dist/utils/client-contract-file.js

@@ -1,18 +1,27 @@
 import { constants } from 'node:fs';
-import { lstat, open } from 'node:fs/promises';
+import { lstat, open, realpath, stat } from 'node:fs/promises';
 import path from 'node:path';
+import { ProtocolClientContractError } from '@hypequery/protocol';
+import { pointer } from './json-pointer.js';
 /** Refuse filesystem indirection for generated output and its existing ancestors. */
 export async function checkClientOutputPath(filePath) {
-    let current = path.resolve(filePath);
+    const target = path.resolve(filePath);
+    let current = target;
     while (true) {
         try {
             const info = await lstat(current);
-            if (info.isSymbolicLink() || (current === path.resolve(filePath) ? !info.isFile() : !info.isDirectory())) {
-                throw new Error('Client output must be a regular file under ordinary directories.');
+            if (info.isSymbolicLink())
+                throw await throughLink(filePath, target, current);
+            if (current === target ? !info.isFile() : !info.isDirectory()) {
+                throw new Error(current === target
+                    ? `Client output ${filePath} must be a regular file.`
+                    : `Client output ${filePath} must be a regular file under ordinary directories: ${current} is not a directory.`);
             }
         }
         catch (error) {
-            if (error.code !== 'ENOENT')
+            // Missing, or below a file: the ancestor that exists is checked next.
+            const code = error.code;
+            if (code !== 'ENOENT' && code !== 'ENOTDIR')
                 throw error;
         }
         const parent = path.dirname(current);
@@ -21,6 +30,27 @@ export async function checkClientOutputPath(filePath) {
         current = parent;
     }
 }
+/**
+ * Name the link, and the same output without it, e.g. /tmp → /private/tmp on macOS.
+ * The path is suggested only when the link resolves to what that position needs:
+ * a directory above the output, a regular file at the output itself.
+ */
+async function throughLink(filePath, target, link) {
+    const message = link === target
+        ? `Client output ${filePath} must be a regular file, not a symbolic link.`
+        : `Client output ${filePath} must be a regular file under ordinary directories: ${link} is a symbolic link.`;
+    try {
+        const real = await realpath(link);
+        const info = await stat(real);
+        if (link === target ? !info.isFile() : !info.isDirectory())
+            return new Error(message);
+        const resolved = path.join(real, path.relative(link, target));
+        return new Error(`${message} Use the path it points to instead: ${resolved}`);
+    }
+    catch {
+        return new Error(message);
+    }
+}
 /** Bound allocation before reading; O_NOFOLLOW also refuses a swapped final symlink. */
 export async function readClientArtifact(filePath, maxBytes = 1_048_576) {
     const handle = await open(filePath, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
@@ -56,3 +86,17 @@ export async function readClientOutput(filePath) {
         throw error;
     }
 }
+/**
+ * Say where a client contract is invalid. An unknown field usually means the
+ * contract was exported by a newer hypequery than this CLI understands.
+ */
+export function describeClientContractError(error) {
+    if (!(error instanceof ProtocolClientContractError))
+        return error;
+    const at = error.field === undefined ? error.path : pointer(error.path, error.field);
+    const where = at ? ` at ${at}` : '';
+    const hint = error.code === 'HQ_CLIENT_UNKNOWN_FIELD'
+        ? ' The contract may come from a newer hypequery than this CLI; upgrade @hypequery/cli.'
+        : '';
+    return new Error(`${error.message.replace(/\.$/, '')}${where} (${error.code}).${hint}`, { cause: error });
+}

package/dist/utils/cloud-client-contract.d.ts

@@ -0,0 +1,20 @@
+import type { ProtocolDeploymentReleaseTarget } from '@hypequery/protocol';
+import { type LiveDeploymentFetch } from './live-deployment.js';
+/**
+ * The origin a generated client calls. Refused when Cloud did not say, when it
+ * is not https (loopback aside), or when it carries a path: the client resolves
+ * its absolute endpoint paths against the origin, so a prefix would be dropped.
+ */
+export declare function clientOrigin(baseUrl: string | undefined): string;
+/**
+ * The client contract of the target's live release, as Cloud serves it beside
+ * the deployment endpoint. Returned as text: the caller decodes and verifies it
+ * exactly as it would a contract file.
+ */
+export declare function fetchCloudClientContract(input: {
+    readonly endpoint: string;
+    readonly token: string;
+    readonly target: ProtocolDeploymentReleaseTarget;
+    readonly fetch?: LiveDeploymentFetch;
+}): Promise<string>;
+//# sourceMappingURL=cloud-client-contract.d.ts.map

package/dist/utils/cloud-client-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-client-contract.d.ts","sourceRoot":"","sources":["../../src/utils/cloud-client-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAW,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAOzE;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAehE;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC;CACtC,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBlB"}

package/dist/utils/cloud-client-contract.js

@@ -0,0 +1,52 @@
+import { liveUrl } from './live-deployment.js';
+import { readCapped } from './read-capped.js';
+const MAX_CONTRACT_BYTES = 1_048_576;
+const LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '[::1]']);
+/**
+ * The origin a generated client calls. Refused when Cloud did not say, when it
+ * is not https (loopback aside), or when it carries a path: the client resolves
+ * its absolute endpoint paths against the origin, so a prefix would be dropped.
+ */
+export function clientOrigin(baseUrl) {
+    if (baseUrl === undefined) {
+        throw new Error('Cloud did not say where this release is served, so the client would have no base URL. Retry, or update Cloud.');
+    }
+    const url = new URL(baseUrl);
+    if (url.protocol !== 'https:' && !(url.protocol === 'http:' && LOOPBACK_HOSTS.has(url.hostname))) {
+        throw new Error(`Cloud serves this release from ${url.origin}, which is not https.`);
+    }
+    if (url.pathname !== '/' || url.search || url.hash) {
+        throw new Error(`Cloud serves this release under ${baseUrl} because an endpoint path collides with a reserved Cloud path (such as /mcp). `
+            + 'Rename that endpoint path and deploy again; generated clients call the customer origin directly.');
+    }
+    return url.origin;
+}
+/**
+ * The client contract of the target's live release, as Cloud serves it beside
+ * the deployment endpoint. Returned as text: the caller decodes and verifies it
+ * exactly as it would a contract file.
+ */
+export async function fetchCloudClientContract(input) {
+    const url = liveUrl(input.endpoint, input.target, 'client-contract');
+    if (!url) {
+        throw new Error('The deployment endpoint is not a Cloud submissions URL, so it serves no client contract.');
+    }
+    const response = await (input.fetch ?? fetch)(url, {
+        method: 'GET',
+        headers: { Accept: 'application/json', Authorization: `Bearer ${input.token}` },
+        redirect: 'error',
+        signal: AbortSignal.timeout(30_000),
+    });
+    const target = `${input.target.project} / ${input.target.environment}`;
+    if (response.status === 401 || response.status === 403) {
+        throw new Error(`Cloud refused the client contract for ${target}. Run \`hypequery login\` again.`);
+    }
+    if (response.status === 404) {
+        throw new Error(`Cloud has no client contract for ${target}: publish a release first, `
+            + 'or this Cloud version does not serve client contracts yet.');
+    }
+    if (!response.ok) {
+        throw new Error(`Cloud could not return the client contract for ${target} (HTTP ${response.status}).`);
+    }
+    return new TextDecoder('utf-8', { fatal: true }).decode(await readCapped(response, MAX_CONTRACT_BYTES));
+}

package/dist/utils/deployment-upload.d.ts

@@ -1,8 +1,11 @@
 import type { ReadableStream } from 'node:stream/web';
 import { type PreparedProtocolDeploymentReleaseEnvelope } from '@hypequery/protocol';
 import { type VerifiedDeploymentBundle } from './deployment-bundle.js';
-import type { DeploymentSubmissionResponse } from '@hypequery/deployment';
-export type { DeploymentSubmissionResponse } from '@hypequery/deployment';
+import type { DeploymentSubmissionResponse as BaseDeploymentSubmissionResponse } from '@hypequery/deployment';
+import { type DraftDeploymentResult } from './draft-deployment.js';
+export type DeploymentSubmissionResponse = BaseDeploymentSubmissionResponse & {
+    readonly draft?: DraftDeploymentResult;
+};
 export type DeploymentUploadErrorCode = 'HQ_UPLOAD_CONFIGURATION' | 'HQ_UPLOAD_IDENTITY_MISMATCH' | 'HQ_UPLOAD_BUNDLE_CHANGED' | 'HQ_UPLOAD_NETWORK' | 'HQ_UPLOAD_REJECTED' | 'HQ_UPLOAD_INVALID_RESPONSE';
 export declare class DeploymentUploadError extends Error {
     readonly code: DeploymentUploadErrorCode;
@@ -29,6 +32,7 @@ export interface HttpDeploymentUploadTransportOptions {
     readonly token: string;
     readonly expectedActivationRevision?: string | null;
     readonly replaceRestored?: boolean;
+    readonly draft?: string;
     readonly timeoutMs?: number;
     readonly fetch?: DeploymentFetch;
 }

package/dist/utils/deployment-upload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment-upload.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-upload.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAIL,KAAK,yCAAyC,EAC/C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAE1E,YAAY,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAQ1E,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,GACzB,6BAA6B,GAC7B,0BAA0B,GAC1B,mBAAmB,GACnB,oBAAoB,GACpB,4BAA4B,CAAC;AAEjC,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAM9E;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,mBAAmB,KACtB,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAErC,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,MAAM,EAAE,wBAAwB,EAChC,OAAO,EAAE,yCAAyC,GACjD,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC1C;AA+WD,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,oCAAoC,GAC5C,yBAAyB,CA+F3B"}
+{"version":3,"file":"deployment-upload.d.ts","sourceRoot":"","sources":["../../src/utils/deployment-upload.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAIL,KAAK,yCAAyC,EAC/C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,4BAA4B,IAAI,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AAC9G,OAAO,EAA8D,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE/H,MAAM,MAAM,4BAA4B,GAAG,gCAAgC,GAAG;IAC5E,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;CACxC,CAAC;AAQF,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,GACzB,6BAA6B,GAC7B,0BAA0B,GAC1B,mBAAmB,GACnB,oBAAoB,GACpB,4BAA4B,CAAC;AAEjC,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAEb,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAM9E;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,mBAAmB,KACtB,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAErC,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,MAAM,EAAE,wBAAwB,EAChC,OAAO,EAAE,yCAAyC,GACjD,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC1C;AAoXD,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,oCAAoC,GAC5C,yBAAyB,CAqG3B"}

package/dist/utils/deployment-upload.js

@@ -4,6 +4,7 @@ import path from 'node:path';
 import { prepareProtocolDeploymentBundleManifest, prepareProtocolDeploymentReleaseEnvelope, } from '@hypequery/protocol';
 import { DEPLOYMENT_BUNDLE_MANIFEST, } from './deployment-bundle.js';
 import { logger } from './logger.js';
+import { parseDraftDeploymentResult, validateDraftDeploymentOptions } from './draft-deployment.js';
 const SHA256_PATTERN = /^[0-9a-f]{64}$/;
 const MAX_RESPONSE_BYTES = 64 * 1024;
 const DEFAULT_TIMEOUT_MS = 120_000;
@@ -249,15 +250,18 @@ function exactRecord(value, fields) {
     }
     return record;
 }
-function validateSubmissionResponse(input, bundleIdentity, releaseIdentity, status) {
+function validateSubmissionResponse(input, bundleIdentity, releaseIdentity, status, expectedDraft) {
     const value = exactRecord(input, [
         'kind',
         'version',
         'status',
         'releaseIdentity',
         'bundleIdentity',
+        ...(expectedDraft ? ['draft'] : []),
     ]);
+    const draft = expectedDraft && value ? parseDraftDeploymentResult(value.draft, expectedDraft) : undefined;
     if (!value
+        || (expectedDraft && !draft)
         || value.kind !== 'hypequery-deployment-submission'
         || value.version !== 1
         || (value.status !== 'accepted' && value.status !== 'already-exists')
@@ -275,6 +279,7 @@ function validateSubmissionResponse(input, bundleIdentity, releaseIdentity, stat
         status: value.status,
         releaseIdentity: value.releaseIdentity,
         bundleIdentity: value.bundleIdentity,
+        ...(draft ? { draft } : {}),
     });
 }
 function rejectedMessage(response, body) {
@@ -319,6 +324,10 @@ function nestedUploadError(input) {
 }
 const defaultFetch = async (input, init) => fetch(input, init);
 export function createHttpDeploymentUploadTransport(options) {
+    validateDraftDeploymentOptions(options);
+    if (options.draft !== undefined && options.expectedActivationRevision !== undefined) {
+        configurationError('Draft uploads cannot specify an expected Production activation revision.');
+    }
     const endpoint = endpointUrl(options.endpoint);
     const token = bearerToken(options.token);
     const timeoutMs = timeout(options.timeoutMs);
@@ -347,6 +356,7 @@ export function createHttpDeploymentUploadTransport(options) {
                         'Idempotency-Key': preparedRelease.identity,
                         'X-HypeQuery-Bundle-Identity': manifest.identity,
                         'X-HypeQuery-Release-Identity': preparedRelease.identity,
+                        ...(options.draft !== undefined ? { 'X-HypeQuery-Draft-Name': options.draft } : {}),
                         ...(options.expectedActivationRevision !== undefined
                             ? {
                                 'X-HypeQuery-Expected-Activation-Revision': options.expectedActivationRevision ?? 'none',
@@ -387,7 +397,7 @@ export function createHttpDeploymentUploadTransport(options) {
             catch {
                 throw new DeploymentUploadError('HQ_UPLOAD_INVALID_RESPONSE', 'Deployment service returned invalid JSON.', response.status);
             }
-            return validateSubmissionResponse(input, manifest.identity, preparedRelease.identity, response.status);
+            return validateSubmissionResponse(input, manifest.identity, preparedRelease.identity, response.status, options.draft !== undefined ? { name: options.draft, endpoint, project: preparedRelease.release.target.project } : undefined);
         },
     };
     return Object.freeze(transport);

package/dist/utils/draft-deployment.d.ts

@@ -0,0 +1,16 @@
+export interface DraftDeploymentResult {
+    readonly draftId: string;
+    readonly name: string;
+    readonly stagingUrl: string;
+}
+export declare function validateDraftDeploymentOptions(options: {
+    draft?: string;
+    replaceRestored?: boolean;
+}): void;
+/** Accept only the requested draft and a staging endpoint on the deployment service. */
+export declare function parseDraftDeploymentResult(input: unknown, expected: {
+    name: string;
+    endpoint: string;
+    project: string;
+}): DraftDeploymentResult | undefined;
+//# sourceMappingURL=draft-deployment.d.ts.map

package/dist/utils/draft-deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-deployment.d.ts","sourceRoot":"","sources":["../../src/utils/draft-deployment.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,IAAI,CAQP;AAED,wFAAwF;AACxF,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D,qBAAqB,GAAG,SAAS,CAmBnC"}

package/dist/utils/draft-deployment.js

@@ -0,0 +1,35 @@
+export function validateDraftDeploymentOptions(options) {
+    if (options.draft === undefined)
+        return;
+    if (options.draft.length > 64 || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(options.draft)) {
+        throw new Error('--draft must be a lowercase name with letters, numbers and single hyphens (max 64 characters).');
+    }
+    if (options.replaceRestored) {
+        throw new Error('--draft cannot be combined with --replace-restored; draft uploads do not replace Production.');
+    }
+}
+/** Accept only the requested draft and a staging endpoint on the deployment service. */
+export function parseDraftDeploymentResult(input, expected) {
+    if (typeof input !== 'object' || input === null || Array.isArray(input)
+        || Object.getPrototypeOf(input) !== Object.prototype)
+        return undefined;
+    const value = input;
+    if (Object.keys(value).sort().join(',') !== 'draftId,name,stagingUrl'
+        || typeof value.draftId !== 'string'
+        || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(value.draftId)
+        || value.name !== expected.name
+        || typeof value.stagingUrl !== 'string')
+        return undefined;
+    let url;
+    try {
+        url = new URL(value.stagingUrl, expected.endpoint);
+    }
+    catch {
+        return undefined;
+    }
+    if (url.origin !== new URL(expected.endpoint).origin || url.username || url.password
+        || url.search || url.hash
+        || url.pathname !== `/api/gateway/${encodeURIComponent(expected.project)}/draft/${value.draftId}`)
+        return undefined;
+    return Object.freeze({ draftId: value.draftId, name: expected.name, stagingUrl: url.href });
+}

package/dist/utils/field-namer.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Hands out the field names of one generated dataset. A field's name is also
+ * its SQL alias, and ClickHouse resolves an alias before a column of the same
+ * name, so a field may take a source column's name only when it reads exactly
+ * that column; otherwise every expression reading that column would read the
+ * aliased field instead. A name that is taken, or is another column's name,
+ * gets the lowest free numeric suffix (`fareTotal2`).
+ */
+export declare function createFieldNamer(columnNames: readonly string[]): (base: string, ownColumn?: string) => string;
+//# sourceMappingURL=field-namer.d.ts.map

package/dist/utils/field-namer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-namer.d.ts","sourceRoot":"","sources":["../../src/utils/field-namer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,IAGrD,MAAM,MAAM,EAAE,YAAY,MAAM,KAAG,MAAM,CAQlD"}

package/dist/utils/field-namer.js

@@ -0,0 +1,20 @@
+/**
+ * Hands out the field names of one generated dataset. A field's name is also
+ * its SQL alias, and ClickHouse resolves an alias before a column of the same
+ * name, so a field may take a source column's name only when it reads exactly
+ * that column; otherwise every expression reading that column would read the
+ * aliased field instead. A name that is taken, or is another column's name,
+ * gets the lowest free numeric suffix (`fareTotal2`).
+ */
+export function createFieldNamer(columnNames) {
+    const columns = new Set(columnNames);
+    const taken = new Set();
+    return (base, ownColumn) => {
+        let name = base;
+        for (let suffix = 2; taken.has(name) || (columns.has(name) && name !== ownColumn); suffix += 1) {
+            name = `${base}${suffix}`;
+        }
+        taken.add(name);
+        return name;
+    };
+}

package/dist/utils/json-pointer.d.ts

@@ -0,0 +1,3 @@
+/** RFC 6901: append *key* to the JSON pointer *path*. */
+export declare function pointer(path: string, key: string): string;
+//# sourceMappingURL=json-pointer.d.ts.map

package/dist/utils/json-pointer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-pointer.d.ts","sourceRoot":"","sources":["../../src/utils/json-pointer.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzD"}

package/dist/utils/json-pointer.js

@@ -0,0 +1,4 @@
+/** RFC 6901: append *key* to the JSON pointer *path*. */
+export function pointer(path, key) {
+    return `${path}/${key.replaceAll('~', '~0').replaceAll('/', '~1')}`;
+}

package/dist/utils/live-deployment.d.ts

@@ -31,7 +31,7 @@ export type LiveDeploymentFetch = typeof fetch;
  * the endpoint is not a Cloud submissions URL. Refuses anything but https (or
  * loopback http) so a credential is never sent in the clear.
  */
-export declare function liveUrl(endpoint: string, target: ProtocolDeploymentReleaseTarget, resource: 'state' | 'source' | 'endpoints'): string | undefined;
+export declare function liveUrl(endpoint: string, target: ProtocolDeploymentReleaseTarget, resource: 'state' | 'source' | 'endpoints' | 'client-contract'): string | undefined;
 export declare function fetchLiveDeployment(input: {
     readonly endpoint: string;
     readonly token: string;

package/dist/utils/live-deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-deployment.d.ts","sourceRoot":"","sources":["../../src/utils/live-deployment.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,qBAAqB,CAAC;AAO7B,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;KACxC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,OAAO,KAAK,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,OAAO,CACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,+BAA+B,EACvC,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,GACzC,MAAM,GAAG,SAAS,CAkBpB;AAsJD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC;CACtC,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAuCtC"}
+{"version":3,"file":"live-deployment.d.ts","sourceRoot":"","sources":["../../src/utils/live-deployment.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,+BAA+B,EACrC,MAAM,qBAAqB,CAAC;AAO7B,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;KACzB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;KACxC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,OAAO,KAAK,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,OAAO,CACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,+BAA+B,EACvC,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,GAAG,iBAAiB,GAC7D,MAAM,GAAG,SAAS,CAkBpB;AAsJD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC;CACtC,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAuCtC"}

package/dist/utils/read-capped.d.ts

@@ -0,0 +1,6 @@
+/**
+ * A response body, refused once it passes `maxBytes`: by the declared length
+ * before reading, and while streaming when no length is declared.
+ */
+export declare function readCapped(response: Response, maxBytes: number): Promise<Uint8Array>;
+//# sourceMappingURL=read-capped.d.ts.map

package/dist/utils/read-capped.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-capped.d.ts","sourceRoot":"","sources":["../../src/utils/read-capped.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA6B1F"}

package/dist/utils/read-capped.js

@@ -0,0 +1,36 @@
+/**
+ * A response body, refused once it passes `maxBytes`: by the declared length
+ * before reading, and while streaming when no length is declared.
+ */
+export async function readCapped(response, maxBytes) {
+    const tooLarge = () => new Error(`The response exceeds ${maxBytes} bytes.`);
+    const declared = Number(response.headers.get('content-length'));
+    if (Number.isFinite(declared) && declared > maxBytes) {
+        // Release the connection rather than leave the body unread.
+        await response.body?.cancel();
+        throw tooLarge();
+    }
+    if (!response.body)
+        return new Uint8Array(await response.arrayBuffer());
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        total += value.byteLength;
+        if (total > maxBytes) {
+            await reader.cancel();
+            throw tooLarge();
+        }
+        chunks.push(value);
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}

package/dist/utils/shell-quote.d.ts

@@ -0,0 +1,6 @@
+/**
+ * One argument as a POSIX shell word, for commands printed for the user to
+ * copy. Plain words stay as they are; anything else is single-quoted.
+ */
+export declare function shellQuote(value: string): string;
+//# sourceMappingURL=shell-quote.d.ts.map

package/dist/utils/shell-quote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-quote.d.ts","sourceRoot":"","sources":["../../src/utils/shell-quote.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/utils/shell-quote.js

@@ -0,0 +1,7 @@
+/**
+ * One argument as a POSIX shell word, for commands printed for the user to
+ * copy. Plain words stay as they are; anything else is single-quoted.
+ */
+export function shellQuote(value) {
+    return /^[A-Za-z0-9_./:=@%+-]+$/.test(value) ? value : `'${value.replaceAll("'", `'\\''`)}'`;
+}

package/dist/utils/telemetry/catalog.d.ts

@@ -625,7 +625,7 @@ export declare const EVENT_CATALOG: {
             readonly flags_used: {
                 readonly kind: "enum_list";
                 readonly description: string;
-                readonly values: readonly ("--path" | "--style" | "--database" | "--chdb-path" | "--auth" | "--all-tables" | "--tables" | "--exclude-tables" | "--no-example" | "--no-interactive" | "--force" | "--skip-connection" | "--port" | "--hostname" | "--no-watch" | "--no-cache" | "--cache" | "--redis-url" | "--open" | "--cors" | "--quiet" | "--tenant" | "--self-test" | "--url" | "--client-contract-url" | "--output" | "--tenant-column" | "--check" | "--diff" | "--cloud-url" | "--environment" | "--bundle-output" | "--release-output" | "--project" | "--no-source" | "--endpoint" | "--replace-restored" | "--mcp-config" | "--release" | "--no-telemetry" | "--help" | "--version")[];
+                readonly values: readonly ("--path" | "--style" | "--database" | "--chdb-path" | "--auth" | "--all-tables" | "--tables" | "--exclude-tables" | "--no-example" | "--no-interactive" | "--force" | "--skip-connection" | "--port" | "--hostname" | "--no-watch" | "--no-cache" | "--cache" | "--redis-url" | "--open" | "--cors" | "--quiet" | "--tenant" | "--self-test" | "--url" | "--client-contract-url" | "--output" | "--tenant-column" | "--check" | "--diff" | "--cloud" | "--project" | "--environment" | "--endpoint" | "--cloud-url" | "--bundle-output" | "--release-output" | "--no-source" | "--replace-restored" | "--mcp-config" | "--draft" | "--client" | "--release" | "--no-telemetry" | "--help" | "--version")[];
             };
             readonly outcome: {
                 readonly kind: "enum";