@hypequery/clickhouse 2.10.1 → 2.11.1

package/dist/core/compiled/errors.js

@@ -1,91 +0,0 @@
-/**
- * Public execution-failure envelope from RFC 0010 §Error envelope.
- *
- * The category set is closed and stable within version 1. It matches the frozen set in
- * `@hypequery/protocol` (`events` module) so runtime failures and emitted diagnostics
- * speak the same vocabulary. New categories require a new contract version.
- */
-export const COMPILED_ERROR_CATEGORIES = [
-    'input-invalid',
-    'unauthenticated',
-    'forbidden',
-    'tenant-required',
-    'not-found',
-    'too-large',
-    'aborted',
-    'deadline-exceeded',
-    'unavailable',
-    'internal',
-];
-/**
- * Categories that describe a client-supplied fault. Their messages MAY carry a safe,
- * caller-facing explanation. Every other category is a server/dependency fault whose
- * message MUST NOT expose adapter error text, SQL, values, or tenant identifiers.
- */
-const CLIENT_FAULT_CATEGORIES = new Set([
-    'input-invalid',
-    'unauthenticated',
-    'forbidden',
-    'tenant-required',
-    'not-found',
-    'too-large',
-    'aborted',
-    'deadline-exceeded',
-]);
-const SAFE_MESSAGE_PATTERN = /[\r\n\t]/;
-export function isCompiledErrorCategory(value) {
-    return (typeof value === 'string' &&
-        COMPILED_ERROR_CATEGORIES.includes(value));
-}
-export function isClientFaultCategory(category) {
-    return CLIENT_FAULT_CATEGORIES.has(category);
-}
-/**
- * The only execution-failure shape a runtime may surface for a compiled query. For
- * server-fault categories the caller-facing message is fixed to a generic string so no
- * adapter text, SQL, value, or tenant identifier can leak.
- */
-export class CompiledQueryError extends Error {
-    category;
-    queryId;
-    cause;
-    constructor(category, message, options = {}) {
-        const safeMessage = CompiledQueryError.resolveMessage(category, message);
-        super(safeMessage);
-        this.name = 'CompiledQueryError';
-        this.category = category;
-        this.queryId = options.queryId;
-        this.cause = options.cause;
-    }
-    static resolveMessage(category, message) {
-        if (!isClientFaultCategory(category)) {
-            // Server-fault categories never carry a caller-authored message.
-            return DEFAULT_SERVER_FAULT_MESSAGE[category] ?? 'The request could not be completed.';
-        }
-        const trimmed = typeof message === 'string' ? message.trim() : '';
-        if (trimmed.length === 0 || SAFE_MESSAGE_PATTERN.test(trimmed)) {
-            return DEFAULT_CLIENT_FAULT_MESSAGE[category] ?? 'The request was rejected.';
-        }
-        return trimmed;
-    }
-    /** The redacted, serializable envelope. Only closed fields; no `cause`, no stack. */
-    toEnvelope() {
-        return this.queryId === undefined
-            ? { category: this.category, message: this.message }
-            : { category: this.category, message: this.message, queryId: this.queryId };
-    }
-}
-const DEFAULT_CLIENT_FAULT_MESSAGE = {
-    'input-invalid': 'The request parameters were invalid.',
-    unauthenticated: 'Authentication is required.',
-    forbidden: 'Access is denied.',
-    'tenant-required': 'A tenant context is required.',
-    'not-found': 'The requested resource was not found.',
-    'too-large': 'The request or result exceeded an allowed bound.',
-    aborted: 'The request was cancelled.',
-    'deadline-exceeded': 'The request deadline was exceeded.',
-};
-const DEFAULT_SERVER_FAULT_MESSAGE = {
-    unavailable: 'The executor is temporarily unavailable.',
-    internal: 'The request could not be completed.',
-};

package/dist/core/compiled/index.d.ts

@@ -1,15 +0,0 @@
-/**
- * CompiledQuery v1 (RFC 0010) — the versioned execution-request contract for the
- * ClickHouse runtime, introduced beside the legacy positional path. See `./types.ts`.
- *
- * CH-01 provides the shape, validation, and redacted debug/error surfaces. Wiring the real
- * `@clickhouse/client` `{name:Type}` + `query_params` transport, capability negotiation,
- * and end-to-end cancellation is CH-02+ and does not touch the legacy adapter signature.
- */
-export { COMPILED_QUERY_VERSION, type CompiledDeadline, type CompiledDebugForm, type CompiledIdentifiers, type CompiledOperation, type CompiledParameterBindings, type CompiledParameterDeclaration, type CompiledParameterType, type CompiledParameterValue, type CompiledQueryV1, type CompiledSensitivity, type CompiledSettings, } from './types.js';
-export { compileQueryV1, type CompileQueryInput } from './compile.js';
-export { assertNoValuesInSql, buildParameterBindings, extractReferencedParameters, validateParameterReferences, } from './parameters.js';
-export { COMPILED_SETTING_BOUNDS, type CompiledSettingName, type DeadlineInputs, type SettingBound, resolveCompiledDeadline, resolveCompiledSettings, } from './settings.js';
-export { COMPILED_ERROR_CATEGORIES, CompiledQueryError, type CompiledErrorCategory, type CompiledErrorEnvelope, type CompiledQueryErrorOptions, isClientFaultCategory, isCompiledErrorCategory, } from './errors.js';
-export { buildDebugForm } from './debug.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/compiled/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/compiled/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtE,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,uBAAuB,EACvB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/core/compiled/index.js

@@ -1,14 +0,0 @@
-/**
- * CompiledQuery v1 (RFC 0010) — the versioned execution-request contract for the
- * ClickHouse runtime, introduced beside the legacy positional path. See `./types.ts`.
- *
- * CH-01 provides the shape, validation, and redacted debug/error surfaces. Wiring the real
- * `@clickhouse/client` `{name:Type}` + `query_params` transport, capability negotiation,
- * and end-to-end cancellation is CH-02+ and does not touch the legacy adapter signature.
- */
-export { COMPILED_QUERY_VERSION, } from './types.js';
-export { compileQueryV1 } from './compile.js';
-export { assertNoValuesInSql, buildParameterBindings, extractReferencedParameters, validateParameterReferences, } from './parameters.js';
-export { COMPILED_SETTING_BOUNDS, resolveCompiledDeadline, resolveCompiledSettings, } from './settings.js';
-export { COMPILED_ERROR_CATEGORIES, CompiledQueryError, isClientFaultCategory, isCompiledErrorCategory, } from './errors.js';
-export { buildDebugForm } from './debug.js';

package/dist/core/compiled/parameters.d.ts

@@ -1,28 +0,0 @@
-import type { CompiledParameterBindings, CompiledParameterDeclaration, CompiledParameterValue } from './types.js';
-/** Extract the set of parameter names a SQL text references via `{name:Type}`. */
-export declare function extractReferencedParameters(sql: string): Set<string>;
-export declare function replaceParameterPlaceholders(sql: string, replace: (name: string, type: string) => string): string;
-/**
- * Validate that the SQL only references declared parameters. Fails closed when a
- * placeholder names an undeclared parameter (RFC 0010 §Parameters).
- */
-export declare function validateParameterReferences(sql: string, declarations: readonly CompiledParameterDeclaration[]): void;
-/**
- * Resolve supplied values against declarations into the native `{name: value}` bindings
- * an adapter binds to server parameters. Fail-closed rules (RFC 0010 §Parameters):
- *   - a supplied name that is not declared is rejected;
- *   - a required declared name with no supplied value is rejected;
- *   - an optional declared name may be absent;
- *   - every supplied value is validated (RFC 0001 for tagged values).
- *
- * No value is ever concatenated into SQL text: values live only in the returned bindings.
- */
-export declare function buildParameterBindings(declarations: readonly CompiledParameterDeclaration[], values: Readonly<Record<string, CompiledParameterValue>>): CompiledParameterBindings;
-/**
- * Assert the invariant that no bound value has leaked into the SQL text. The compile path
- * never substitutes values, so this is a defense-in-depth check: the SQL must reference
- * every non-optional bound name through a placeholder and must not be the legacy
- * positional form (`?`).
- */
-export declare function assertNoValuesInSql(sql: string, bindings: CompiledParameterBindings): void;
-//# sourceMappingURL=parameters.d.ts.map

package/dist/core/compiled/parameters.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parameters.d.ts","sourceRoot":"","sources":["../../../src/core/compiled/parameters.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,yBAAyB,EACzB,4BAA4B,EAC5B,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAsIpB,kFAAkF;AAClF,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAEpE;AAED,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,GAC9C,MAAM,CAUR;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,SAAS,4BAA4B,EAAE,GACpD,IAAI,CAoBN;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,SAAS,4BAA4B,EAAE,EACrD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,GACvD,yBAAyB,CAyC3B;AAmFD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,yBAAyB,GAClC,IAAI,CAyBN"}

package/dist/core/compiled/parameters.js

@@ -1,282 +0,0 @@
-import { ProtocolValueError, isProtocolIdentifier, validateCanonicalValue, } from '@hypequery/protocol';
-import { CompiledQueryError } from './errors.js';
-const LOGICAL_TYPES = new Set([
-    'array', 'boolean', 'bytes', 'date', 'datetime', 'decimal', 'enum', 'float',
-    'integer', 'map', 'null', 'string', 'tuple', 'uuid',
-]);
-function skipQuoted(sql, start, quote) {
-    let index = start + 1;
-    while (index < sql.length) {
-        if (sql[index] === '\\') {
-            index += 2;
-            continue;
-        }
-        if (sql[index] === quote) {
-            if (sql[index + 1] === quote) {
-                index += 2;
-                continue;
-            }
-            return index + 1;
-        }
-        index += 1;
-    }
-    return sql.length;
-}
-function parsePlaceholder(sql, start) {
-    let index = start + 1;
-    while (/\s/.test(sql[index] ?? ''))
-        index += 1;
-    const nameStart = index;
-    if (!/[A-Za-z_]/.test(sql[index] ?? ''))
-        return undefined;
-    index += 1;
-    while (/[A-Za-z0-9_]/.test(sql[index] ?? ''))
-        index += 1;
-    const name = sql.slice(nameStart, index);
-    while (/\s/.test(sql[index] ?? ''))
-        index += 1;
-    if (sql[index] !== ':')
-        return undefined;
-    index += 1;
-    const typeStart = index;
-    let quote;
-    let parenthesisDepth = 0;
-    while (index < sql.length) {
-        const character = sql[index];
-        if (quote) {
-            if (character === '\\') {
-                index += 2;
-                continue;
-            }
-            if (character === quote) {
-                if (sql[index + 1] === quote) {
-                    index += 2;
-                    continue;
-                }
-                quote = undefined;
-            }
-            index += 1;
-            continue;
-        }
-        if (character === "'" || character === '"' || character === '`') {
-            quote = character;
-            index += 1;
-            continue;
-        }
-        if (character === '(')
-            parenthesisDepth += 1;
-        if (character === ')') {
-            parenthesisDepth -= 1;
-            if (parenthesisDepth < 0)
-                return undefined;
-        }
-        if (character === '{')
-            return undefined;
-        if (character === '}' && parenthesisDepth === 0) {
-            const type = sql.slice(typeStart, index).trim();
-            if (type.length === 0)
-                return undefined;
-            return { name, type, start, end: index + 1 };
-        }
-        index += 1;
-    }
-    return undefined;
-}
-function scanSqlParameters(sql) {
-    const references = [];
-    let hasPositionalPlaceholder = false;
-    let index = 0;
-    while (index < sql.length) {
-        const character = sql[index];
-        if (character === "'" || character === '"' || character === '`') {
-            index = skipQuoted(sql, index, character);
-            continue;
-        }
-        if (character === '-' && sql[index + 1] === '-') {
-            const newline = sql.indexOf('\n', index + 2);
-            index = newline === -1 ? sql.length : newline + 1;
-            continue;
-        }
-        if (character === '#') {
-            const newline = sql.indexOf('\n', index + 1);
-            index = newline === -1 ? sql.length : newline + 1;
-            continue;
-        }
-        if (character === '/' && sql[index + 1] === '*') {
-            const close = sql.indexOf('*/', index + 2);
-            index = close === -1 ? sql.length : close + 2;
-            continue;
-        }
-        if (character === '?')
-            hasPositionalPlaceholder = true;
-        if (character === '{') {
-            const reference = parsePlaceholder(sql, index);
-            if (reference) {
-                references.push(reference);
-                index = reference.end;
-                continue;
-            }
-        }
-        index += 1;
-    }
-    return { references, hasPositionalPlaceholder };
-}
-/** Extract the set of parameter names a SQL text references via `{name:Type}`. */
-export function extractReferencedParameters(sql) {
-    return new Set(scanSqlParameters(sql).references.map(({ name }) => name));
-}
-export function replaceParameterPlaceholders(sql, replace) {
-    const references = scanSqlParameters(sql).references;
-    let result = '';
-    let offset = 0;
-    for (const reference of references) {
-        result += sql.slice(offset, reference.start);
-        result += replace(reference.name, reference.type);
-        offset = reference.end;
-    }
-    return result + sql.slice(offset);
-}
-/**
- * Validate that the SQL only references declared parameters. Fails closed when a
- * placeholder names an undeclared parameter (RFC 0010 §Parameters).
- */
-export function validateParameterReferences(sql, declarations) {
-    const declared = new Map(declarations.map((declaration) => [
-        declaration.name,
-        declaration,
-    ]));
-    for (const reference of scanSqlParameters(sql).references) {
-        const declaration = declared.get(reference.name);
-        if (!declaration) {
-            throw new CompiledQueryError('input-invalid', `SQL references undeclared parameter ${reference.name}.`);
-        }
-        if (reference.type !== declaration.type.clickHouseType) {
-            throw new CompiledQueryError('input-invalid', `SQL parameter ${reference.name} does not match its declared ClickHouse type.`);
-        }
-    }
-}
-/**
- * Resolve supplied values against declarations into the native `{name: value}` bindings
- * an adapter binds to server parameters. Fail-closed rules (RFC 0010 §Parameters):
- *   - a supplied name that is not declared is rejected;
- *   - a required declared name with no supplied value is rejected;
- *   - an optional declared name may be absent;
- *   - every supplied value is validated (RFC 0001 for tagged values).
- *
- * No value is ever concatenated into SQL text: values live only in the returned bindings.
- */
-export function buildParameterBindings(declarations, values) {
-    const declaredByName = new Map();
-    for (const declaration of declarations) {
-        if (!isProtocolIdentifier(declaration.name)) {
-            throw new CompiledQueryError('input-invalid', 'Parameter declaration has an invalid name.');
-        }
-        if (declaredByName.has(declaration.name)) {
-            throw new CompiledQueryError('input-invalid', `Duplicate parameter declaration ${declaration.name}.`);
-        }
-        declaredByName.set(declaration.name, declaration);
-    }
-    for (const suppliedName of Object.keys(values)) {
-        if (!declaredByName.has(suppliedName)) {
-            throw new CompiledQueryError('input-invalid', `Value supplied for undeclared parameter ${suppliedName}.`);
-        }
-    }
-    const bindings = {};
-    for (const [name, declaration] of declaredByName) {
-        const present = Object.prototype.hasOwnProperty.call(values, name);
-        if (!present) {
-            if (declaration.optional)
-                continue;
-            throw new CompiledQueryError('input-invalid', `Required parameter ${name} is missing.`);
-        }
-        bindings[name] = validateParameterValue(name, declaration, values[name]);
-    }
-    return Object.freeze(bindings);
-}
-function validateParameterValue(name, declaration, value) {
-    try {
-        const validated = validateCanonicalValue(value, {
-            declaredClickHouseType: declaration.type.clickHouseType,
-        });
-        validateLogicalType(name, declaration, validated);
-        return validated;
-    }
-    catch (error) {
-        if (error instanceof ProtocolValueError) {
-            throw new CompiledQueryError('input-invalid', `Parameter ${name} failed value validation (${error.code}).`, { cause: error });
-        }
-        throw error;
-    }
-}
-function logicalTypeOf(value) {
-    if (value === null)
-        return 'null';
-    if (typeof value === 'string')
-        return 'string';
-    if (typeof value === 'number')
-        return 'float';
-    if (typeof value === 'boolean')
-        return 'boolean';
-    return value.$hypequery.type;
-}
-function unwrapNullable(type) {
-    const trimmed = type.trim();
-    if (trimmed.startsWith('Nullable(') && trimmed.endsWith(')')) {
-        return { nullable: true, inner: trimmed.slice(9, -1).trim() };
-    }
-    return { nullable: false, inner: trimmed };
-}
-function clickHouseTypeSupportsLogical(type, logical) {
-    const { nullable, inner } = unwrapNullable(type);
-    if (logical === 'null')
-        return nullable;
-    switch (logical) {
-        case 'string': return /^(?:String|FixedString\(\d+\)|LowCardinality\(String\))$/.test(inner);
-        case 'float': return /^Float(?:32|64)$/.test(inner);
-        case 'boolean': return /^(?:Bool|Boolean)$/.test(inner);
-        case 'integer': return /^(?:U?Int)(?:8|16|32|64|128|256)$/.test(inner);
-        case 'decimal': return /^Decimal(?:(?:32|64|128|256)\(\d+\)|\(\d+\s*,\s*\d+\))$/.test(inner);
-        case 'date': return /^(?:Date|Date32)$/.test(inner);
-        case 'datetime': return /^DateTime(?:64)?(?:\(.*\))?$/.test(inner);
-        case 'uuid': return inner === 'UUID';
-        case 'bytes': return /^(?:String|FixedString\(\d+\))$/.test(inner);
-        case 'enum': return /^Enum(?:8|16)\(.*\)$/.test(inner);
-        case 'array': return /^Array\(.+\)$/.test(inner);
-        case 'tuple': return /^Tuple\(.+\)$/.test(inner);
-        case 'map': return /^Map\(.+\)$/.test(inner);
-        default: return false;
-    }
-}
-function validateLogicalType(name, declaration, value) {
-    const actual = logicalTypeOf(value);
-    const declared = declaration.type.logical;
-    if (!LOGICAL_TYPES.has(declared) || (actual !== declared && actual !== 'null')) {
-        throw new CompiledQueryError('input-invalid', `Parameter ${name} does not match its declared logical type.`);
-    }
-    if (!clickHouseTypeSupportsLogical(declaration.type.clickHouseType, actual)) {
-        throw new CompiledQueryError('input-invalid', `Parameter ${name} does not match its declared ClickHouse type.`);
-    }
-}
-/**
- * Assert the invariant that no bound value has leaked into the SQL text. The compile path
- * never substitutes values, so this is a defense-in-depth check: the SQL must reference
- * every non-optional bound name through a placeholder and must not be the legacy
- * positional form (`?`).
- */
-export function assertNoValuesInSql(sql, bindings) {
-    const scan = scanSqlParameters(sql);
-    if (scan.hasPositionalPlaceholder) {
-        throw new CompiledQueryError('input-invalid', 'Compiled SQL must not use positional placeholders.');
-    }
-    const referenced = new Set(scan.references.map(({ name }) => name));
-    for (const name of Object.keys(bindings)) {
-        if (!referenced.has(name)) {
-            throw new CompiledQueryError('input-invalid', `Bound parameter ${name} is not referenced by the SQL.`);
-        }
-    }
-    for (const name of referenced) {
-        if (!Object.prototype.hasOwnProperty.call(bindings, name)) {
-            throw new CompiledQueryError('input-invalid', `SQL parameter ${name} does not have a bound value.`);
-        }
-    }
-}

package/dist/core/compiled/settings.d.ts

@@ -1,49 +0,0 @@
-import type { CompiledDeadline, CompiledSettings } from './types.js';
-/**
- * Closed, typed settings allow-list (RFC 0010 §Settings). Each entry defines an inclusive
- * range; products may TIGHTEN a range but never loosen it. Settings originate only from
- * trusted components — a request can never set, override, or relax them.
- */
-export interface SettingBound {
-    readonly min: number;
-    readonly max: number;
-}
-export declare const COMPILED_SETTING_BOUNDS: Readonly<{
-    readonly maxExecutionMs: {
-        readonly min: 1;
-        readonly max: 3600000;
-    };
-    readonly maxResultRows: {
-        readonly min: 0;
-        readonly max: 1000000000000;
-    };
-    readonly maxResultBytes: {
-        readonly min: 0;
-        readonly max: 1099511627776;
-    };
-}>;
-export type CompiledSettingName = keyof typeof COMPILED_SETTING_BOUNDS;
-/**
- * Clamp trusted settings into the allow-list. A value outside the closed range is
- * rejected fail-closed rather than silently coerced, since settings are trusted input and
- * an out-of-range value signals a policy bug, not caller data.
- */
-export declare function resolveCompiledSettings(input: CompiledSettings): CompiledSettings;
-export interface DeadlineInputs {
-    /** Absolute caller-supplied deadline, epoch-millis. */
-    readonly callerAtEpochMs?: number;
-    /** Policy-derived maximum window from `now`, milliseconds. */
-    readonly policyMaxMs?: number;
-    /** Current time, epoch-millis. Injected so resolution stays deterministic/testable. */
-    readonly nowEpochMs: number;
-}
-/**
- * Resolve the effective deadline (RFC 0010 §Deadline and cancellation precedence).
- *
- * The effective deadline is the EARLIER of the caller-supplied deadline and the
- * policy-derived maximum — a caller can shorten but never extend the window. A supplied
- * deadline at or before `now` fails immediately with `deadline-exceeded` rather than being
- * extended or ignored.
- */
-export declare function resolveCompiledDeadline(inputs: DeadlineInputs): CompiledDeadline | undefined;
-//# sourceMappingURL=settings.d.ts.map

package/dist/core/compiled/settings.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../src/core/compiled/settings.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;EAI8B,CAAC;AAEnE,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,uBAAuB,CAAC;AAEvE;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,CAejF;AAED,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,uFAAuF;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAyC5F"}

package/dist/core/compiled/settings.js

@@ -1,65 +0,0 @@
-import { CompiledQueryError } from './errors.js';
-export const COMPILED_SETTING_BOUNDS = Object.freeze({
-    maxExecutionMs: { min: 1, max: 3_600_000 },
-    maxResultRows: { min: 0, max: 1_000_000_000_000 },
-    maxResultBytes: { min: 0, max: 1_099_511_627_776 },
-});
-/**
- * Clamp trusted settings into the allow-list. A value outside the closed range is
- * rejected fail-closed rather than silently coerced, since settings are trusted input and
- * an out-of-range value signals a policy bug, not caller data.
- */
-export function resolveCompiledSettings(input) {
-    const resolved = {};
-    for (const key of Object.keys(COMPILED_SETTING_BOUNDS)) {
-        const value = input[key];
-        if (value === undefined)
-            continue;
-        const bound = COMPILED_SETTING_BOUNDS[key];
-        if (!Number.isInteger(value) || value < bound.min || value > bound.max) {
-            throw new CompiledQueryError('input-invalid', `Setting ${key} is outside its allowed range.`);
-        }
-        resolved[key] = value;
-    }
-    return Object.freeze(resolved);
-}
-/**
- * Resolve the effective deadline (RFC 0010 §Deadline and cancellation precedence).
- *
- * The effective deadline is the EARLIER of the caller-supplied deadline and the
- * policy-derived maximum — a caller can shorten but never extend the window. A supplied
- * deadline at or before `now` fails immediately with `deadline-exceeded` rather than being
- * extended or ignored.
- */
-export function resolveCompiledDeadline(inputs) {
-    const { callerAtEpochMs, policyMaxMs, nowEpochMs } = inputs;
-    if (!Number.isSafeInteger(nowEpochMs) || nowEpochMs < 0) {
-        throw new CompiledQueryError('input-invalid', 'The current time is invalid.');
-    }
-    if (callerAtEpochMs !== undefined
-        && (!Number.isSafeInteger(callerAtEpochMs) || callerAtEpochMs < 0)) {
-        throw new CompiledQueryError('input-invalid', 'The supplied deadline is invalid.');
-    }
-    if (policyMaxMs !== undefined && (!Number.isSafeInteger(policyMaxMs) || policyMaxMs <= 0)) {
-        throw new CompiledQueryError('input-invalid', 'The policy deadline window is invalid.');
-    }
-    const policyAt = policyMaxMs === undefined ? undefined : nowEpochMs + policyMaxMs;
-    if (policyAt !== undefined && !Number.isSafeInteger(policyAt)) {
-        throw new CompiledQueryError('input-invalid', 'The policy deadline is outside the safe range.');
-    }
-    if (callerAtEpochMs !== undefined && callerAtEpochMs <= nowEpochMs) {
-        throw new CompiledQueryError('deadline-exceeded', 'The supplied deadline is at or before the current time.');
-    }
-    if (callerAtEpochMs === undefined && policyAt === undefined) {
-        return undefined;
-    }
-    if (callerAtEpochMs === undefined) {
-        return Object.freeze({ atEpochMs: policyAt, source: 'policy' });
-    }
-    if (policyAt === undefined) {
-        return Object.freeze({ atEpochMs: callerAtEpochMs, source: 'caller' });
-    }
-    return Object.freeze(callerAtEpochMs <= policyAt
-        ? { atEpochMs: callerAtEpochMs, source: 'caller' }
-        : { atEpochMs: policyAt, source: 'policy' });
-}