@hypequery/deployment 0.0.0-canary-20260719200737 → 0.1.0

package/dist/control-plane-adapters.js

@@ -1,163 +0,0 @@
-const INTERNAL_BODY = '{"error":{"code":"HQ_CONTROL_INTERNAL","message":"The deployment control-plane request could not be processed."}}\n';
-const INTERNAL_RESPONSE = Object.freeze({
-    status: 500,
-    headers: Object.freeze({
-        'content-type': 'application/json; charset=utf-8',
-        'content-length': String(Buffer.byteLength(INTERNAL_BODY)),
-        'cache-control': 'no-store',
-    }),
-    body: INTERNAL_BODY,
-});
-const FETCH_SINGLETON_HEADERS = new Set([
-    'authorization',
-    'content-length',
-    'content-type',
-    'idempotency-key',
-    'x-hypequery-bundle-identity',
-    'x-hypequery-release-identity',
-]);
-function queryParameters(search) {
-    const query = Object.create(null);
-    for (const [name, value] of search) {
-        const current = query[name];
-        if (current === undefined) {
-            query[name] = value;
-        }
-        else if (typeof current === 'string') {
-            query[name] = Object.freeze([current, value]);
-        }
-        else {
-            query[name] = Object.freeze([...current, value]);
-        }
-    }
-    return Object.freeze(query);
-}
-function fetchHeaders(input) {
-    const headers = Object.create(null);
-    for (const [name, value] of input.entries()) {
-        headers[name] = value;
-        if (FETCH_SINGLETON_HEADERS.has(name) && value.includes(',')) {
-            // Fetch combines duplicate header lines before exposing Headers. Reify a
-            // second case-insensitive entry so the core singleton guard rejects it.
-            headers[name.toUpperCase()] = value;
-        }
-    }
-    return Object.freeze(headers);
-}
-async function* fetchBody(input) {
-    if (input === null)
-        return;
-    const reader = input.getReader();
-    try {
-        while (true) {
-            const result = await reader.read();
-            if (result.done)
-                return;
-            yield result.value;
-        }
-    }
-    finally {
-        reader.releaseLock();
-    }
-}
-function nodeHeaders(request) {
-    const headers = Object.create(null);
-    for (let index = 0; index < request.rawHeaders.length; index += 2) {
-        const name = request.rawHeaders[index].toLowerCase();
-        const value = request.rawHeaders[index + 1];
-        if (headers[name] === undefined) {
-            headers[name] = value;
-        }
-        else {
-            // Keep a second case-insensitive entry so the core duplicate-header guard
-            // observes duplicates instead of accepting Node's comma-joined value.
-            headers[name.toUpperCase()] = value;
-        }
-    }
-    return Object.freeze(headers);
-}
-async function* nodeBody(request) {
-    for await (const chunk of request) {
-        yield chunk instanceof Uint8Array ? chunk : Buffer.from(chunk);
-    }
-}
-function nodeHasBody(headers) {
-    return Object.entries(headers).some(([name, value]) => {
-        const normalized = name.toLowerCase();
-        return normalized === 'transfer-encoding'
-            || (normalized === 'content-length' && value !== '0');
-    });
-}
-function internalFetchResponse() {
-    return new Response(INTERNAL_RESPONSE.body, {
-        status: INTERNAL_RESPONSE.status,
-        headers: INTERNAL_RESPONSE.headers,
-    });
-}
-function sendNodeResponse(response, controlResponse) {
-    if (response.writableEnded || response.headersSent)
-        return;
-    response.statusCode = controlResponse.status;
-    for (const [name, value] of Object.entries(controlResponse.headers)) {
-        response.setHeader(name, value);
-    }
-    response.end(controlResponse.body);
-}
-export function createDeploymentControlPlaneFetchHandler(controlPlane) {
-    return async (request) => {
-        try {
-            const url = new URL(request.url);
-            const response = await controlPlane.handle({
-                method: request.method,
-                path: url.pathname,
-                query: queryParameters(url.searchParams),
-                headers: fetchHeaders(request.headers),
-                body: fetchBody(request.body),
-                hasBody: request.body !== null,
-                signal: request.signal,
-            });
-            return new Response(response.body, { status: response.status, headers: response.headers });
-        }
-        catch {
-            return internalFetchResponse();
-        }
-    };
-}
-export function createDeploymentControlPlaneNodeHandler(controlPlane) {
-    return async (request, response) => {
-        const abort = new AbortController();
-        const abortRequest = () => {
-            if (!request.complete)
-                abort.abort(new Error('The request connection was closed.'));
-        };
-        const abortResponse = () => {
-            if (!response.writableEnded)
-                abort.abort(new Error('The response connection was closed.'));
-        };
-        request.socket.once('close', abortRequest);
-        response.once('close', abortResponse);
-        if (request.destroyed && !request.complete)
-            abortRequest();
-        try {
-            const url = new URL(request.url ?? '/', 'http://deployment-control-plane.invalid');
-            const headers = nodeHeaders(request);
-            const controlResponse = await controlPlane.handle({
-                method: request.method ?? 'GET',
-                path: url.pathname,
-                query: queryParameters(url.searchParams),
-                headers,
-                body: nodeBody(request),
-                hasBody: nodeHasBody(headers),
-                signal: abort.signal,
-            });
-            sendNodeResponse(response, controlResponse);
-        }
-        catch {
-            sendNodeResponse(response, INTERNAL_RESPONSE);
-        }
-        finally {
-            request.socket.off('close', abortRequest);
-            response.off('close', abortResponse);
-        }
-    };
-}

package/dist/control-plane-limits.d.ts

@@ -1,7 +0,0 @@
-export interface DeploymentControlPlaneLimits {
-    readonly maxActivationRequestBytes: number;
-    readonly maxHistoryPageSize: number;
-}
-export declare const DEFAULT_DEPLOYMENT_CONTROL_PLANE_LIMITS: Readonly<DeploymentControlPlaneLimits>;
-export declare function resolveDeploymentControlPlaneLimits(input?: Partial<DeploymentControlPlaneLimits>): Readonly<DeploymentControlPlaneLimits>;
-//# sourceMappingURL=control-plane-limits.d.ts.map

package/dist/control-plane-limits.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"control-plane-limits.d.ts","sourceRoot":"","sources":["../src/control-plane-limits.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,eAAO,MAAM,uCAAuC,EACpD,QAAQ,CAAC,4BAA4B,CAGnC,CAAC;AAEH,wBAAgB,mCAAmC,CACjD,KAAK,GAAE,OAAO,CAAC,4BAA4B,CAAM,GAChD,QAAQ,CAAC,4BAA4B,CAAC,CAcxC"}

package/dist/control-plane-limits.js

@@ -1,18 +0,0 @@
-export const DEFAULT_DEPLOYMENT_CONTROL_PLANE_LIMITS = Object.freeze({
-    maxActivationRequestBytes: 16 * 1024,
-    maxHistoryPageSize: 100,
-});
-export function resolveDeploymentControlPlaneLimits(input = {}) {
-    const limits = { ...DEFAULT_DEPLOYMENT_CONTROL_PLANE_LIMITS };
-    for (const key of Object.keys(limits)) {
-        const value = input[key];
-        if (value === undefined)
-            continue;
-        if (!Number.isSafeInteger(value) || value < 1
-            || value > DEFAULT_DEPLOYMENT_CONTROL_PLANE_LIMITS[key]) {
-            throw new RangeError(`${key} must be a positive safe integer no greater than the control-plane v1 maximum`);
-        }
-        limits[key] = value;
-    }
-    return Object.freeze(limits);
-}

package/dist/control-plane.d.ts

@@ -1,35 +0,0 @@
-import { type ProtocolDeploymentReleaseTarget } from '@hypequery/protocol';
-import { type DeploymentActivationRegistry } from './activation.js';
-import { type DeploymentControlPlaneLimits } from './control-plane-limits.js';
-import type { DeploymentAuthenticator, DeploymentIntake, DeploymentIntakeRequest, DeploymentIntakeResponse } from './types.js';
-export type DeploymentControlPlaneAction = 'activate' | 'read-current-activation' | 'read-activation-history';
-export interface DeploymentControlPlaneAuthorizationInput<Principal> {
-    readonly principal: Principal;
-    readonly action: DeploymentControlPlaneAction;
-    readonly target: ProtocolDeploymentReleaseTarget;
-    readonly signal?: AbortSignal;
-}
-export interface DeploymentControlPlaneAuthorizer<Principal> {
-    authorize(input: DeploymentControlPlaneAuthorizationInput<Principal>): Promise<boolean>;
-}
-export interface DeploymentControlPlaneRequest extends DeploymentIntakeRequest {
-    readonly method: string;
-    readonly path: string;
-    readonly query?: Readonly<Record<string, string | readonly string[] | undefined>>;
-    /** Set by transport adapters without consuming the request stream. */
-    readonly hasBody?: boolean;
-}
-export type DeploymentControlPlaneResponse = DeploymentIntakeResponse;
-export interface DeploymentControlPlane {
-    handle(request: DeploymentControlPlaneRequest): Promise<DeploymentControlPlaneResponse>;
-}
-export interface DeploymentControlPlaneOptions<Principal> {
-    readonly intake: DeploymentIntake;
-    readonly activations: DeploymentActivationRegistry;
-    readonly authenticator: DeploymentAuthenticator<Principal>;
-    readonly authorizer: DeploymentControlPlaneAuthorizer<Principal>;
-    readonly limits?: Partial<DeploymentControlPlaneLimits>;
-}
-export type DeploymentControlPlaneErrorCode = 'HQ_CONTROL_BAD_REQUEST' | 'HQ_CONTROL_UNAUTHENTICATED' | 'HQ_CONTROL_FORBIDDEN' | 'HQ_CONTROL_NOT_FOUND' | 'HQ_CONTROL_METHOD_NOT_ALLOWED' | 'HQ_CONTROL_TOO_LARGE' | 'HQ_CONTROL_RELEASE_NOT_FOUND' | 'HQ_CONTROL_RELEASE_UNAVAILABLE' | 'HQ_CONTROL_INTERNAL';
-export declare function createDeploymentControlPlane<Principal>(options: DeploymentControlPlaneOptions<Principal>): DeploymentControlPlane;
-//# sourceMappingURL=control-plane.d.ts.map

package/dist/control-plane.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,4BAA4B,EAClC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EACV,uBAAuB,EACvB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAMpB,MAAM,MAAM,4BAA4B,GACpC,UAAU,GACV,yBAAyB,GACzB,yBAAyB,CAAC;AAE9B,MAAM,WAAW,wCAAwC,CAAC,SAAS;IACjE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,gCAAgC,CAAC,SAAS;IACzD,SAAS,CAAC,KAAK,EAAE,wCAAwC,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,6BAA8B,SAAQ,uBAAuB;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;IAClF,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,8BAA8B,GAAG,wBAAwB,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,6BAA6B,CAAC,SAAS;IACtD,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAC3D,QAAQ,CAAC,UAAU,EAAE,gCAAgC,CAAC,SAAS,CAAC,CAAC;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;CACzD;AAED,MAAM,MAAM,+BAA+B,GACvC,wBAAwB,GACxB,4BAA4B,GAC5B,sBAAsB,GACtB,sBAAsB,GACtB,+BAA+B,GAC/B,sBAAsB,GACtB,8BAA8B,GAC9B,gCAAgC,GAChC,qBAAqB,CAAC;AA+X1B,wBAAgB,4BAA4B,CAAC,SAAS,EACpD,OAAO,EAAE,6BAA6B,CAAC,SAAS,CAAC,GAChD,sBAAsB,CAkHxB"}

package/dist/control-plane.js

@@ -1,362 +0,0 @@
-import { validateProtocolDeploymentReleaseTarget, } from '@hypequery/protocol';
-import { DeploymentActivationError, } from './activation.js';
-import { resolveDeploymentControlPlaneLimits, } from './control-plane-limits.js';
-const IDENTITY_PATTERN = /^[0-9a-f]{64}$/;
-const JSON_CONTENT_TYPE = /^application\/json(?:;\s*charset=utf-8)?$/i;
-const textDecoder = new TextDecoder('utf-8', { fatal: true });
-const ERROR_STATUS = Object.freeze({
-    HQ_CONTROL_BAD_REQUEST: 400,
-    HQ_CONTROL_UNAUTHENTICATED: 401,
-    HQ_CONTROL_FORBIDDEN: 403,
-    HQ_CONTROL_NOT_FOUND: 404,
-    HQ_CONTROL_METHOD_NOT_ALLOWED: 405,
-    HQ_CONTROL_TOO_LARGE: 413,
-    HQ_CONTROL_RELEASE_NOT_FOUND: 404,
-    HQ_CONTROL_RELEASE_UNAVAILABLE: 503,
-    HQ_CONTROL_INTERNAL: 500,
-});
-class ControlPlaneError extends Error {
-    code;
-    status;
-    expose;
-    headers;
-    constructor(code, message, options = {}) {
-        super(message, options.cause === undefined ? undefined : { cause: options.cause });
-        this.name = 'DeploymentControlPlaneError';
-        this.code = code;
-        this.status = ERROR_STATUS[code];
-        this.expose = options.expose ?? this.status < 500;
-        this.headers = Object.freeze({ ...options.headers });
-    }
-}
-function requestHeader(headers, expectedName) {
-    const values = Object.entries(headers)
-        .filter(([name, value]) => value !== undefined && name.toLowerCase() === expectedName)
-        .map(([, value]) => value);
-    if (values.length > 1) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', `Duplicate ${expectedName} header.`);
-    }
-    return values[0];
-}
-function bearerToken(headers) {
-    const authorization = requestHeader(headers, 'authorization');
-    const token = authorization?.startsWith('Bearer ') ? authorization.slice(7) : '';
-    if (token.length < 1 || token.length > 4096 || token.trim() !== token
-        || [...token].some(character => {
-            const code = character.charCodeAt(0);
-            return code < 0x21 || code > 0x7e;
-        })) {
-        throw new ControlPlaneError('HQ_CONTROL_UNAUTHENTICATED', 'A valid bearer credential is required.', { headers: { 'www-authenticate': 'Bearer' } });
-    }
-    return token;
-}
-function jsonResponse(status, body, headers = {}) {
-    const encoded = `${JSON.stringify(body)}\n`;
-    return Object.freeze({
-        status,
-        headers: Object.freeze({
-            'content-type': 'application/json; charset=utf-8',
-            'content-length': String(Buffer.byteLength(encoded)),
-            'cache-control': 'no-store',
-            ...headers,
-        }),
-        body: encoded,
-    });
-}
-function sanitizeMessage(input) {
-    return [...input].map(character => {
-        const code = character.codePointAt(0) ?? 0;
-        return code < 0x20 || code === 0x7f ? ' ' : character;
-    }).join('').slice(0, 1024).trim() || 'The deployment control-plane request was rejected.';
-}
-function errorResponse(error) {
-    const value = error instanceof ControlPlaneError
-        ? error
-        : new ControlPlaneError('HQ_CONTROL_INTERNAL', 'The deployment control-plane request could not be processed.', { expose: false, cause: error });
-    return jsonResponse(value.status, {
-        error: {
-            code: value.code,
-            message: sanitizeMessage(value.expose
-                ? value.message
-                : 'The deployment control-plane request could not be processed.'),
-        },
-    }, value.headers);
-}
-function decodeTargetSegment(input) {
-    try {
-        return decodeURIComponent(input);
-    }
-    catch (error) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'Deployment target path encoding is invalid.', { cause: error });
-    }
-}
-function validatedTarget(project, environment) {
-    try {
-        return validateProtocolDeploymentReleaseTarget({
-            project: decodeTargetSegment(project),
-            environment: decodeTargetSegment(environment),
-        });
-    }
-    catch (error) {
-        if (error instanceof ControlPlaneError)
-            throw error;
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'Deployment target path is invalid.', { cause: error });
-    }
-}
-function parseRoute(path) {
-    if (path === '/v1/deployments/submissions')
-        return Object.freeze({ kind: 'submission' });
-    const segments = path.split('/');
-    if (segments.length !== 7 || segments[0] !== '' || segments[1] !== 'v1'
-        || segments[2] !== 'deployments' || segments[3] !== 'targets')
-        return undefined;
-    if (segments[6] !== 'activation' && segments[6] !== 'activations')
-        return undefined;
-    const target = validatedTarget(segments[4], segments[5]);
-    if (segments[6] === 'activation')
-        return Object.freeze({ kind: 'activation', target });
-    if (segments[6] === 'activations')
-        return Object.freeze({ kind: 'history', target });
-    return undefined;
-}
-function requireMethod(method, ...expected) {
-    if (!expected.includes(method)) {
-        const allowed = expected.join(', ');
-        throw new ControlPlaneError('HQ_CONTROL_METHOD_NOT_ALLOWED', `This deployment control-plane route requires ${allowed}.`, { headers: { allow: allowed } });
-    }
-}
-function requireNoQuery(request) {
-    if (request.query && Object.keys(request.query).length > 0) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'This deployment control-plane route does not accept query parameters.');
-    }
-}
-function requireNoBody(request) {
-    const length = requestHeader(request.headers, 'content-length');
-    const transferEncoding = requestHeader(request.headers, 'transfer-encoding');
-    if (request.hasBody || transferEncoding !== undefined || (length !== undefined && length !== '0')) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'This deployment control-plane route does not accept a request body.');
-    }
-}
-function throwIfAborted(signal) {
-    if (signal?.aborted) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The deployment control-plane request was aborted.', { cause: signal.reason });
-    }
-}
-async function readBoundedBody(request, maximum) {
-    const declared = requestHeader(request.headers, 'content-length');
-    let declaredLength;
-    if (declared !== undefined) {
-        if (!/^(?:0|[1-9][0-9]*)$/.test(declared)) {
-            throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'Content-Length must be a non-negative decimal integer.');
-        }
-        declaredLength = Number(declared);
-        if (!Number.isSafeInteger(declaredLength) || declaredLength > maximum) {
-            throw new ControlPlaneError('HQ_CONTROL_TOO_LARGE', 'The activation request exceeds its byte limit.');
-        }
-    }
-    const chunks = [];
-    let total = 0;
-    try {
-        for await (const chunk of request.body) {
-            throwIfAborted(request.signal);
-            if (!(chunk instanceof Uint8Array)) {
-                throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The activation request body yielded a non-byte chunk.');
-            }
-            total += chunk.byteLength;
-            if (total > maximum) {
-                throw new ControlPlaneError('HQ_CONTROL_TOO_LARGE', 'The activation request exceeds its byte limit.');
-            }
-            if (declaredLength !== undefined && total > declaredLength) {
-                throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The activation request body does not match Content-Length.');
-            }
-            chunks.push(Buffer.from(chunk));
-        }
-    }
-    catch (error) {
-        if (error instanceof ControlPlaneError)
-            throw error;
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The activation request body could not be read.', { cause: error });
-    }
-    throwIfAborted(request.signal);
-    if (declaredLength !== undefined && total !== declaredLength) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The activation request body does not match Content-Length.');
-    }
-    return Buffer.concat(chunks, total);
-}
-function parseActivationBody(bytes) {
-    let input;
-    try {
-        input = JSON.parse(textDecoder.decode(bytes));
-    }
-    catch (error) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The activation request must be valid UTF-8 JSON.', { cause: error });
-    }
-    if (typeof input !== 'object' || input === null || Array.isArray(input)) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The activation request is invalid.');
-    }
-    const value = input;
-    const expected = ['expectedRevision', 'kind', 'releaseIdentity', 'version'];
-    if (Object.keys(value).sort().join('\0') !== expected.join('\0')
-        || value.kind !== 'hypequery-deployment-activation-request' || value.version !== 1
-        || typeof value.releaseIdentity !== 'string'
-        || !IDENTITY_PATTERN.test(value.releaseIdentity)
-        || (value.expectedRevision !== null
-            && (typeof value.expectedRevision !== 'string'
-                || !IDENTITY_PATTERN.test(value.expectedRevision)))) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The activation request is invalid.');
-    }
-    return Object.freeze({
-        releaseIdentity: value.releaseIdentity,
-        expectedRevision: value.expectedRevision,
-    });
-}
-function activationError(error) {
-    switch (error.code) {
-        case 'HQ_DEPLOYMENT_ACTIVATION_INVALID_REQUEST':
-            throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The deployment activation request is invalid.', { cause: error });
-        case 'HQ_DEPLOYMENT_ACTIVATION_TARGET_MISMATCH':
-            throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'The deployment release does not match the requested target.', { cause: error });
-        case 'HQ_DEPLOYMENT_ACTIVATION_RELEASE_NOT_FOUND':
-            throw new ControlPlaneError('HQ_CONTROL_RELEASE_NOT_FOUND', 'The deployment release was not found.', { cause: error });
-        case 'HQ_DEPLOYMENT_ACTIVATION_RELEASE_UNAVAILABLE':
-            throw new ControlPlaneError('HQ_CONTROL_RELEASE_UNAVAILABLE', 'The deployment release is temporarily unavailable.', { cause: error });
-        default:
-            throw new ControlPlaneError('HQ_CONTROL_INTERNAL', 'The deployment activation state could not be processed.', { expose: false, cause: error });
-    }
-}
-async function activationCall(operation) {
-    try {
-        return await operation();
-    }
-    catch (error) {
-        if (error instanceof DeploymentActivationError)
-            activationError(error);
-        throw error;
-    }
-}
-function activationResponse(status, activation) {
-    return jsonResponse(status === 'activated' ? 201 : 200, {
-        kind: 'hypequery-deployment-activation-response',
-        version: 1,
-        status,
-        activation,
-    });
-}
-function validatedHistoryQuery(query, maximum) {
-    const values = query ?? {};
-    if (Object.keys(values).some(key => key !== 'limit' && key !== 'before')) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'History query parameters are invalid.');
-    }
-    const limitInput = values.limit;
-    if (limitInput !== undefined && typeof limitInput !== 'string') {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'History limit is invalid.');
-    }
-    const limit = limitInput === undefined ? maximum : Number(limitInput);
-    if (!Number.isSafeInteger(limit) || limit < 1 || limit > maximum
-        || (limitInput !== undefined && String(limit) !== limitInput)) {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'History limit is invalid.');
-    }
-    const before = values.before;
-    if (before !== undefined && typeof before !== 'string') {
-        throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'History cursor is invalid.');
-    }
-    if (before !== undefined) {
-        if (!IDENTITY_PATTERN.test(before)) {
-            throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'History cursor is invalid.');
-        }
-    }
-    return Object.freeze({ limit, ...(before === undefined ? {} : { before }) });
-}
-export function createDeploymentControlPlane(options) {
-    const limits = resolveDeploymentControlPlaneLimits(options.limits);
-    async function authenticateAndAuthorize(request, action, target) {
-        throwIfAborted(request.signal);
-        const token = bearerToken(request.headers);
-        const principal = await options.authenticator.authenticate({ token, signal: request.signal });
-        if (principal === null) {
-            throw new ControlPlaneError('HQ_CONTROL_UNAUTHENTICATED', 'The bearer credential is invalid.', { headers: { 'www-authenticate': 'Bearer' } });
-        }
-        throwIfAborted(request.signal);
-        const allowed = await options.authorizer.authorize({
-            principal,
-            action,
-            target,
-            signal: request.signal,
-        });
-        if (!allowed) {
-            throw new ControlPlaneError('HQ_CONTROL_FORBIDDEN', 'The caller is not authorized for the deployment target.');
-        }
-        throwIfAborted(request.signal);
-    }
-    async function process(request) {
-        const method = request.method.toUpperCase();
-        const route = parseRoute(request.path);
-        if (!route) {
-            throw new ControlPlaneError('HQ_CONTROL_NOT_FOUND', 'Deployment route not found.');
-        }
-        if (route.kind === 'submission') {
-            requireMethod(method, 'POST');
-            requireNoQuery(request);
-            return options.intake.handle(request);
-        }
-        const target = route.target;
-        if (route.kind === 'activation') {
-            if (method === 'GET') {
-                requireNoQuery(request);
-                requireNoBody(request);
-                await authenticateAndAuthorize(request, 'read-current-activation', target);
-                const current = await activationCall(() => options.activations.current(target));
-                return jsonResponse(200, {
-                    kind: 'hypequery-deployment-current-activation',
-                    version: 1,
-                    target,
-                    activation: current ?? null,
-                });
-            }
-            requireMethod(method, 'GET', 'PUT');
-            requireNoQuery(request);
-            await authenticateAndAuthorize(request, 'activate', target);
-            const contentType = requestHeader(request.headers, 'content-type');
-            if (!contentType || !JSON_CONTENT_TYPE.test(contentType)) {
-                throw new ControlPlaneError('HQ_CONTROL_BAD_REQUEST', 'Activation requests require application/json with UTF-8 encoding.');
-            }
-            const body = parseActivationBody(await readBoundedBody(request, limits.maxActivationRequestBytes));
-            const result = await activationCall(() => options.activations.activate({
-                target,
-                releaseIdentity: body.releaseIdentity,
-                expectedRevision: body.expectedRevision,
-            }));
-            if (result.status === 'conflict') {
-                return jsonResponse(409, {
-                    kind: 'hypequery-deployment-activation-response',
-                    version: 1,
-                    status: 'conflict',
-                    current: result.current,
-                });
-            }
-            return activationResponse(result.status, result.activation);
-        }
-        requireMethod(method, 'GET');
-        requireNoBody(request);
-        await authenticateAndAuthorize(request, 'read-activation-history', target);
-        const historyQuery = validatedHistoryQuery(request.query, limits.maxHistoryPageSize);
-        const page = await activationCall(() => (options.activations.historyPage(target, historyQuery)));
-        return jsonResponse(200, {
-            kind: 'hypequery-deployment-activation-history',
-            version: 1,
-            target,
-            activations: page.activations,
-            nextBefore: page.nextBefore,
-        });
-    }
-    return Object.freeze({
-        async handle(request) {
-            try {
-                return await process(request);
-            }
-            catch (error) {
-                return errorResponse(error);
-            }
-        },
-    });
-}

package/dist/filesystem-store.d.ts

@@ -1,25 +0,0 @@
-import { type ProtocolDeploymentReleaseEnvelope } from '@hypequery/protocol';
-import { type VerifiedDeploymentBundle } from './bundle.js';
-import type { DeploymentSubmissionStore } from './types.js';
-export type FileSystemDeploymentStoreErrorCode = 'HQ_DEPLOYMENT_STORE_CONFIGURATION' | 'HQ_DEPLOYMENT_STORE_INVALID_SUBMISSION' | 'HQ_DEPLOYMENT_STORE_CORRUPT_STATE' | 'HQ_DEPLOYMENT_STORE_IO';
-export declare class FileSystemDeploymentStoreError extends Error {
-    readonly code: FileSystemDeploymentStoreErrorCode;
-    constructor(code: FileSystemDeploymentStoreErrorCode, message: string, options?: {
-        readonly cause?: unknown;
-    });
-}
-export interface FileSystemDeploymentSubmissionStoreOptions {
-    readonly directory: string;
-}
-export interface StoredDeploymentSubmission {
-    readonly releaseDirectory: string;
-    readonly release: ProtocolDeploymentReleaseEnvelope;
-    readonly releaseCanonical: string;
-    readonly releaseIdentity: string;
-    readonly bundle: VerifiedDeploymentBundle;
-}
-export interface FileSystemDeploymentSubmissionStore<Principal> extends DeploymentSubmissionStore<Principal> {
-    read(releaseIdentity: string): Promise<StoredDeploymentSubmission | undefined>;
-}
-export declare function createFileSystemDeploymentSubmissionStore<Principal = unknown>(options: FileSystemDeploymentSubmissionStoreOptions): FileSystemDeploymentSubmissionStore<Principal>;
-//# sourceMappingURL=filesystem-store.d.ts.map

package/dist/filesystem-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"filesystem-store.d.ts","sourceRoot":"","sources":["../src/filesystem-store.ts"],"names":[],"mappings":"AAWA,OAAO,EAEL,KAAK,iCAAiC,EACvC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,yBAAyB,EAE1B,MAAM,YAAY,CAAC;AASpB,MAAM,MAAM,kCAAkC,GAC1C,mCAAmC,GACnC,wCAAwC,GACxC,mCAAmC,GACnC,wBAAwB,CAAC;AAE7B,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC;gBAGhD,IAAI,EAAE,kCAAkC,EACxC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAM7C;AAED,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,mCAAmC,CAAC,SAAS,CAC5D,SAAQ,yBAAyB,CAAC,SAAS,CAAC;IAC5C,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;CAChF;AAobD,wBAAgB,yCAAyC,CAAC,SAAS,GAAG,OAAO,EAC3E,OAAO,EAAE,0CAA0C,GAClD,mCAAmC,CAAC,SAAS,CAAC,CAkHhD"}