@hypequery/deployment 0.8.0 → 0.9.1

package/dist/semantic-data-plane.js

@@ -1,10 +1,22 @@
-import { claimedFailure } from './utils/semantic-executor-failure.js';
-import { DeploymentSemanticInvocationError, fail, throwIfAborted } from './semantic-invocation-errors.js';
-export { DeploymentSemanticInvocationError, toProtocolSemanticInvocationFailure } from './semantic-invocation-errors.js';
-import { definedLimits, lowest, tighten } from './utils/semantic-budget-limits.js';
-import { missing } from './utils/required-access.js';
+/**
+ * Dataset invocation against an activated deployment.
+ *
+ * Decision 0002 requires a dataset call to run a fixed enforcement sequence:
+ * select the active generation, resolve the target from its validated
+ * contract, authenticate, enforce roles and scopes, resolve tenant, apply the
+ * most restrictive budget, validate input, execute, then validate and bound
+ * the output.
+ *
+ * Execution itself is injected. This module decides whether a call is allowed
+ * and what it is allowed to ask for.
+ */
 import { ProtocolSemanticInvocationError, validateProtocolDeploymentContract, validateProtocolSemanticInvocation, validateProtocolSemanticInvocationResult, } from '@hypequery/protocol';
 import { validateSemanticOperation, } from './semantic-operation-validation.js';
+import { DeploymentSemanticInvocationError, fail, throwIfAborted } from './semantic-invocation-errors.js';
+import { missing } from './utils/required-access.js';
+import { definedLimits, lowest, tighten } from './utils/semantic-budget-limits.js';
+import { claimedFailure } from './utils/semantic-executor-failure.js';
+export { DeploymentSemanticInvocationError, toProtocolSemanticInvocationFailure } from './semantic-invocation-errors.js';
 const DEFAULT_LIMITS = Object.freeze({
     maxRows: 10_000,
     maxOffset: 10_000,
@@ -30,6 +42,14 @@ export function createDeploymentSemanticDataPlane(options) {
     // against everything. A caller that omits a limit gets the default.
     const configured = { ...DEFAULT_LIMITS, ...definedLimits(options.limits) };
     function resolveTarget(operation) {
+        // A metric target cannot be served: the contract has no field that could
+        // carry one, so there is nothing to look up and nothing to authorize.
+        if (operation.kind === 'metric') {
+            fail('not-found', 'HQ_SEMANTIC_METRIC_NOT_FOUND', 'The metric was not found.', {
+                path: '$.operation.metric',
+                relist: true,
+            });
+        }
         const dataset = datasets.get(String(operation.dataset));
         if (dataset === undefined) {
             fail('not-found', 'HQ_SEMANTIC_DATASET_NOT_FOUND', 'The dataset was not found.', {
@@ -37,25 +57,16 @@ export function createDeploymentSemanticDataPlane(options) {
                 relist: true,
             });
         }
-        const metric = operation.kind === 'metric'
-            ? dataset.metrics.find(entry => String(entry.name) === String(operation.metric))
-            : undefined;
-        if (operation.kind === 'metric' && metric === undefined) {
-            fail('not-found', 'HQ_SEMANTIC_METRIC_NOT_FOUND', 'The metric was not found.', {
-                path: '$.operation.metric',
-                relist: true,
-            });
-        }
         // An endpoint policy is what publishes a target. Without one the contract
         // describes the dataset but never exposed it, so it is not addressable.
-        const endpoint = metric?.endpoint ?? dataset.endpoint;
+        const endpoint = dataset.endpoint;
         if (endpoint === undefined) {
             fail('not-found', 'HQ_SEMANTIC_NOT_PUBLISHED', 'The target is not published.', {
                 path: '$.operation',
                 relist: true,
             });
         }
-        return { dataset, ...(metric === undefined ? {} : { metric }), endpoint };
+        return { dataset, endpoint };
     }
     async function invoke(request) {
         throwIfAborted(request.signal);
@@ -76,7 +87,7 @@ export function createDeploymentSemanticDataPlane(options) {
             fail('stale-activation', 'HQ_SEMANTIC_STALE_ACTIVATION', 'The pinned activation is no longer active.', { retryable: true, relist: true });
         }
         const operation = invocation.operation;
-        const { dataset, metric, endpoint } = resolveTarget(operation);
+        const { dataset, endpoint } = resolveTarget(operation);
         let principal = null;
         if (endpoint.access.kind === 'authenticated' && !options.authenticate) {
             fail('configuration-invalid', 'HQ_SEMANTIC_CONFIGURATION', 'An authenticator is required for this target.');
@@ -85,7 +96,7 @@ export function createDeploymentSemanticDataPlane(options) {
             && (endpoint.access.kind === 'authenticated' || request.credentials !== undefined)) {
             try {
                 principal = await options.authenticate({
-                    credentials: request.credentials, invocation, dataset, ...(metric ? { metric } : {}),
+                    credentials: request.credentials, invocation, dataset,
                 });
             }
             catch (error) {
@@ -112,7 +123,7 @@ export function createDeploymentSemanticDataPlane(options) {
             else {
                 try {
                     tenant = await options.resolveTenant({
-                        principal, invocation, dataset, ...(metric ? { metric } : {}),
+                        principal, invocation, dataset,
                     });
                 }
                 catch (error) {
@@ -157,7 +168,6 @@ export function createDeploymentSemanticDataPlane(options) {
             output = await options.execute({
                 deployment,
                 dataset,
-                ...(metric === undefined ? {} : { metric }),
                 operation,
                 principal,
                 tenant,

package/dist/semantic-operation-validation.d.ts

@@ -6,7 +6,7 @@
  * loading the authoring package. A gateway must be able to reject a bad
  * invocation without any of the deploying application's code.
  */
-import type { ProtocolDatasetContract, ProtocolSemanticQuery } from '@hypequery/protocol';
+import type { ProtocolDeploymentDataset, ProtocolSemanticQuery } from '@hypequery/protocol';
 export interface SemanticOperationViolation {
     readonly message: string;
     readonly path: string;
@@ -25,5 +25,5 @@ export interface SemanticOperationLimits {
  * Returns every violation rather than the first, so a caller correcting an
  * agent-authored query sees the whole problem in one round trip.
  */
-export declare function validateSemanticOperation(operation: ProtocolSemanticQuery, dataset: ProtocolDatasetContract, datasets: ReadonlyMap<string, ProtocolDatasetContract>, limits: SemanticOperationLimits): readonly SemanticOperationViolation[];
+export declare function validateSemanticOperation(operation: ProtocolSemanticQuery, dataset: ProtocolDeploymentDataset, datasets: ReadonlyMap<string, ProtocolDeploymentDataset>, limits: SemanticOperationLimits): readonly SemanticOperationViolation[];
 //# sourceMappingURL=semantic-operation-validation.d.ts.map

package/dist/semantic-operation-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"semantic-operation-validation.d.ts","sourceRoot":"","sources":["../src/semantic-operation-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,uBAAuB,EAGvB,qBAAqB,EAEtB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAiGD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,uBAAuB,EAChC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,EACtD,MAAM,EAAE,uBAAuB,GAC9B,SAAS,0BAA0B,EAAE,CAgGvC"}
+{"version":3,"file":"semantic-operation-validation.d.ts","sourceRoot":"","sources":["../src/semantic-operation-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,yBAAyB,EAEzB,qBAAqB,EAEtB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AA8ED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,yBAAyB,EAClC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,EACxD,MAAM,EAAE,uBAAuB,GAC9B,SAAS,0BAA0B,EAAE,CA0FvC"}

package/dist/semantic-operation-validation.js

@@ -8,7 +8,7 @@
  */
 const ALL_GRAINS = ['day', 'week', 'month', 'quarter', 'year'];
 /**
- * What a dataset exposes, before any metric narrows it.
+ * What a dataset exposes.
  *
  * A relationship contributes `<name>.<dimension>` for its target's groupable
  * dimensions, matching the one-hop rule the authoring layer enforces. Filters
@@ -52,20 +52,6 @@ function resolveDataset(dataset, datasets) {
         grains: new Set(dataset.timeField === undefined ? [] : ALL_GRAINS),
     };
 }
-/** A metric may only narrow what its dataset exposes, never widen it. */
-function narrowToMetric(base, metric) {
-    const declaredDimensions = new Set(metric.dimensions.map(String));
-    const declaredFilters = new Set(metric.filters.map(String));
-    return {
-        groupable: new Set([...base.groupable].filter(name => declaredDimensions.has(name))),
-        filters: new Map([...base.filters].filter(([name]) => declaredFilters.has(name))),
-        // A metric selects itself; a caller cannot add measures to it.
-        measures: new Set(),
-        grains: new Set(metric.grain === undefined
-            ? metric.grains.filter(grain => base.grains.has(grain))
-            : [metric.grain]),
-    };
-}
 /**
  * The field a filter expression addresses, or null when it is not a plain
  * comparison.
@@ -93,16 +79,13 @@ function comparisonField(expression) {
 export function validateSemanticOperation(operation, dataset, datasets, limits) {
     const violations = [];
     const fail = (message, path) => violations.push({ message, path });
-    let metric;
+    // A deployment carries no metric, so a metric operation addresses nothing the
+    // contract published, whatever else it selects.
     if (operation.kind === 'metric') {
-        metric = dataset.metrics.find(entry => String(entry.name) === String(operation.metric));
-        if (metric === undefined) {
-            fail(`Unknown metric "${String(operation.metric)}".`, '$.operation.metric');
-            return violations;
-        }
+        fail(`Unknown metric "${String(operation.metric)}".`, '$.operation.metric');
+        return violations;
     }
-    const base = resolveDataset(dataset, datasets);
-    const allowed = metric === undefined ? base : narrowToMetric(base, metric);
+    const allowed = resolveDataset(dataset, datasets);
     const dimensions = operation.dimensions ?? [];
     if (dimensions.length > limits.maxDimensions) {
         fail(`At most ${limits.maxDimensions} dimensions may be selected.`, '$.operation.dimensions');
@@ -115,19 +98,17 @@ export function validateSemanticOperation(operation, dataset, datasets, limits)
     if (new Set(dimensions.map(String)).size !== dimensions.length) {
         fail('Dimensions must be unique.', '$.operation.dimensions');
     }
-    if (operation.kind === 'dataset') {
-        const measures = operation.measures ?? [];
-        if (measures.length > limits.maxMeasures) {
-            fail(`At most ${limits.maxMeasures} measures may be selected.`, '$.operation.measures');
-        }
-        measures.forEach((name, index) => {
-            if (!allowed.measures.has(String(name))) {
-                fail(`Unknown measure "${String(name)}".`, `$.operation.measures[${index}]`);
-            }
-        });
-        if (dimensions.length === 0 && measures.length === 0) {
-            fail('At least one dimension or measure must be selected.', '$.operation');
+    const measures = operation.measures ?? [];
+    if (measures.length > limits.maxMeasures) {
+        fail(`At most ${limits.maxMeasures} measures may be selected.`, '$.operation.measures');
+    }
+    measures.forEach((name, index) => {
+        if (!allowed.measures.has(String(name))) {
+            fail(`Unknown measure "${String(name)}".`, `$.operation.measures[${index}]`);
         }
+    });
+    if (dimensions.length === 0 && measures.length === 0) {
+        fail('At least one dimension or measure must be selected.', '$.operation');
     }
     const filters = operation.filters ?? [];
     if (filters.length > limits.maxFilters) {
@@ -156,7 +137,6 @@ export function validateSemanticOperation(operation, dataset, datasets, limits)
     const orderable = new Set([
         ...allowed.groupable,
         ...allowed.measures,
-        ...(metric === undefined ? [] : [String(metric.name)]),
         ...(operation.by === undefined ? [] : ['period']),
     ]);
     orderBy.forEach((entry, index) => {

package/dist/utils/read-bounded-file.d.ts

@@ -0,0 +1,4 @@
+import type { FileHandle } from 'node:fs/promises';
+/** Read at most the declared limit, including when a file grows after stat. */
+export declare function readBoundedFile(handle: FileHandle, maximum: number, minimum: number, errorMessage: string): Promise<Buffer>;
+//# sourceMappingURL=read-bounded-file.d.ts.map

package/dist/utils/read-bounded-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-bounded-file.d.ts","sourceRoot":"","sources":["../../src/utils/read-bounded-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,+EAA+E;AAC/E,wBAAsB,eAAe,CACnC,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAajB"}

package/dist/utils/read-bounded-file.js

@@ -0,0 +1,18 @@
+/** Read at most the declared limit, including when a file grows after stat. */
+export async function readBoundedFile(handle, maximum, minimum, errorMessage) {
+    const buffer = Buffer.allocUnsafe(Math.min(64 * 1024, maximum + 1));
+    const chunks = [];
+    let total = 0;
+    while (total <= maximum) {
+        const { bytesRead } = await handle.read(buffer, 0, Math.min(buffer.length, maximum + 1 - total), null);
+        if (bytesRead === 0)
+            break;
+        total += bytesRead;
+        if (total > maximum)
+            throw new Error(errorMessage);
+        chunks.push(Buffer.from(buffer.subarray(0, bytesRead)));
+    }
+    if (total < minimum)
+        throw new Error(errorMessage);
+    return Buffer.concat(chunks, total);
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hypequery/deployment",
-  "version": "0.8.0",
-  "description": "Verified deployment intake, activation, and runtime hosting for Hypequery analytics",
+  "version": "0.9.1",
+  "description": "Verified deployment intake, activation, and semantic invocation for Hypequery analytics",
   "keywords": [
     "hypequery",
     "deployment",
@@ -26,13 +26,13 @@
     "README.md"
   ],
   "dependencies": {
-    "@hypequery/protocol": "0.13.0"
+    "@hypequery/protocol": "0.15.0"
   },
   "devDependencies": {
     "@types/node": "^22.5.0",
     "typescript": "^5.7.3",
     "vitest": "^3.2.6",
-    "@hypequery/datasets": "0.15.0"
+    "@hypequery/datasets": "0.18.0"
   },
   "engines": {
     "node": ">=20"

package/dist/data-plane-adapters.d.ts

@@ -1,18 +0,0 @@
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import { type DeploymentDataPlane } from './data-plane.js';
-export type DeploymentDataPlaneFetchHandler = (request: Request) => Promise<Response>;
-export type DeploymentDataPlaneNodeHandler = (request: IncomingMessage, response: ServerResponse) => Promise<void>;
-export interface DeploymentDataPlaneAdapterRequest {
-    readonly method: string;
-    readonly path: string;
-    readonly query: Readonly<Record<string, string | readonly string[]>>;
-    readonly headers: Readonly<Record<string, string>>;
-}
-export interface DeploymentDataPlaneAdapterOptions {
-    /** Request body limit from 1 through 1,048,576 bytes. */
-    readonly maxRequestBytes?: number;
-    readonly credentials?: (request: DeploymentDataPlaneAdapterRequest) => unknown;
-}
-export declare function createDeploymentDataPlaneFetchHandler(dataPlane: DeploymentDataPlane, options?: DeploymentDataPlaneAdapterOptions): DeploymentDataPlaneFetchHandler;
-export declare function createDeploymentDataPlaneNodeHandler(dataPlane: DeploymentDataPlane, options?: DeploymentDataPlaneAdapterOptions): DeploymentDataPlaneNodeHandler;
-//# sourceMappingURL=data-plane-adapters.d.ts.map

package/dist/data-plane-adapters.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-plane-adapters.d.ts","sourceRoot":"","sources":["../src/data-plane-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIjE,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,+BAA+B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AACtF,MAAM,MAAM,8BAA8B,GAAG,CAC3C,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,KACrB,OAAO,CAAC,IAAI,CAAC,CAAC;AAEnB,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,iCAAiC;IAChD,yDAAyD;IACzD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,iCAAiC,KAAK,OAAO,CAAC;CAChF;AAoPD,wBAAgB,qCAAqC,CACnD,SAAS,EAAE,mBAAmB,EAC9B,OAAO,GAAE,iCAAsC,GAC9C,+BAA+B,CAwBjC;AAqDD,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,mBAAmB,EAC9B,OAAO,GAAE,iCAAsC,GAC9C,8BAA8B,CAuChC"}

package/dist/data-plane-adapters.js

@@ -1,304 +0,0 @@
-import { DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS, } from '@hypequery/protocol';
-import { DeploymentDataPlaneError, } from './data-plane.js';
-import { DeploymentHostError } from './host.js';
-class AdapterError extends Error {
-    code;
-    status;
-    constructor(code, status, message) {
-        super(message);
-        this.code = code;
-        this.status = status;
-    }
-}
-const JSON_CONTENT_TYPE = /^application\/json(?:;\s*charset=utf-8)?$/i;
-function maximumBytes(input) {
-    const maximum = DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS.maxInputBytes;
-    const value = input ?? maximum;
-    if (!Number.isSafeInteger(value) || value < 1 || value > maximum) {
-        throw new RangeError(`maxRequestBytes must be an integer between 1 and ${maximum}`);
-    }
-    return value;
-}
-function queryParameters(search) {
-    const query = Object.create(null);
-    for (const [name, value] of search) {
-        const current = query[name];
-        if (current === undefined)
-            query[name] = value;
-        else if (typeof current === 'string')
-            query[name] = Object.freeze([current, value]);
-        else
-            query[name] = Object.freeze([...current, value]);
-    }
-    return Object.freeze(query);
-}
-function contentLength(headers, maximum) {
-    const value = headers['content-length'];
-    if (value === undefined)
-        return undefined;
-    if (!/^(?:0|[1-9][0-9]*)$/.test(value)) {
-        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Content-Length is invalid.');
-    }
-    const length = Number(value);
-    if (!Number.isSafeInteger(length)) {
-        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Content-Length is invalid.');
-    }
-    if (length > maximum) {
-        throw new AdapterError('HQ_DATA_PLANE_REQUEST_TOO_LARGE', 413, 'The data-plane request exceeds its byte limit.');
-    }
-    return length;
-}
-function requestInput(query, body, contentType) {
-    const hasQuery = Object.keys(query).length > 0;
-    if (body !== undefined && hasQuery) {
-        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'A data-plane request cannot contain both query parameters and a JSON body.');
-    }
-    if (body !== undefined) {
-        if (!contentType || !JSON_CONTENT_TYPE.test(contentType)) {
-            throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Data-plane request bodies require application/json with UTF-8 encoding.');
-        }
-        return body;
-    }
-    return hasQuery ? JSON.stringify(query) : undefined;
-}
-function credentials(options, request) {
-    return options.credentials ? options.credentials(request) : request.headers.authorization;
-}
-function cacheControl(result) {
-    if (result.cacheTtlMs === undefined || result.cacheTtlMs <= 0)
-        return 'no-store';
-    return `public, max-age=${Math.floor(result.cacheTtlMs / 1_000)}`;
-}
-function successResponse(result) {
-    if (result.output === undefined) {
-        return Object.freeze({
-            status: 204,
-            headers: Object.freeze({ 'cache-control': cacheControl(result) }),
-        });
-    }
-    const body = `${JSON.stringify(result.output)}\n`;
-    return Object.freeze({
-        status: 200,
-        headers: Object.freeze({
-            'content-type': 'application/json; charset=utf-8',
-            'content-length': String(Buffer.byteLength(body)),
-            'cache-control': cacheControl(result),
-        }),
-        body,
-    });
-}
-function errorStatus(error) {
-    switch (error.code) {
-        case 'HQ_DATA_PLANE_INPUT_INVALID': return 400;
-        case 'HQ_DATA_PLANE_UNAUTHENTICATED': return 401;
-        case 'HQ_DATA_PLANE_FORBIDDEN':
-        case 'HQ_DATA_PLANE_TENANT_REQUIRED': return 403;
-        case 'HQ_DATA_PLANE_ROUTE_NOT_FOUND': return 404;
-        case 'HQ_DATA_PLANE_METHOD_NOT_ALLOWED': return 405;
-        case 'HQ_DATA_PLANE_ABORTED': return 499;
-        case 'HQ_DATA_PLANE_EXECUTOR_UNAVAILABLE': return 503;
-        default: return 500;
-    }
-}
-function errorResponse(error) {
-    let status = 500;
-    let code = 'HQ_DATA_PLANE_INTERNAL';
-    let message = 'The deployment data-plane request could not be processed.';
-    let path;
-    if (error instanceof AdapterError) {
-        status = error.status;
-        code = error.code;
-        message = error.message;
-    }
-    else if (error instanceof DeploymentDataPlaneError) {
-        status = errorStatus(error);
-        code = error.code;
-        if (status < 500) {
-            message = error.message;
-            path = error.path;
-        }
-    }
-    else if (error instanceof DeploymentHostError) {
-        code = error.code;
-        if (error.code === 'HQ_DEPLOYMENT_HOST_NOT_READY'
-            || error.code === 'HQ_DEPLOYMENT_HOST_CLOSED') {
-            status = 503;
-            message = error.message;
-        }
-    }
-    const body = `${JSON.stringify({
-        error: { code, message, ...(path === undefined ? {} : { path }) },
-    })}\n`;
-    return Object.freeze({
-        status,
-        headers: Object.freeze({
-            'content-type': 'application/json; charset=utf-8',
-            'content-length': String(Buffer.byteLength(body)),
-            'cache-control': 'no-store',
-            ...(status === 401 ? { 'www-authenticate': 'Bearer' } : {}),
-        }),
-        body,
-    });
-}
-async function execute(dataPlane, options, request, input, signal) {
-    try {
-        const result = await dataPlane.executeJson({
-            ...request,
-            input,
-            credentials: credentials(options, request),
-            signal,
-        });
-        return successResponse(result);
-    }
-    catch (error) {
-        return errorResponse(error);
-    }
-}
-function fetchHeaders(input) {
-    const headers = Object.create(null);
-    for (const [name, value] of input)
-        headers[name.toLowerCase()] = value;
-    if (headers.authorization?.includes(',')) {
-        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Authorization header is ambiguous.');
-    }
-    return Object.freeze(headers);
-}
-async function fetchBytes(stream, declared, maximum) {
-    if (stream === null) {
-        if (declared !== undefined && declared !== 0) {
-            throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
-        }
-        return undefined;
-    }
-    const reader = stream.getReader();
-    const chunks = [];
-    let total = 0;
-    try {
-        while (true) {
-            const result = await reader.read();
-            if (result.done)
-                break;
-            total += result.value.byteLength;
-            if (total > maximum)
-                throw new AdapterError('HQ_DATA_PLANE_REQUEST_TOO_LARGE', 413, 'The data-plane request exceeds its byte limit.');
-            if (declared !== undefined && total > declared) {
-                throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
-            }
-            chunks.push(result.value);
-        }
-    }
-    catch (error) {
-        await reader.cancel(error).catch(() => undefined);
-        throw error;
-    }
-    finally {
-        reader.releaseLock();
-    }
-    if (declared !== undefined && total !== declared) {
-        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
-    }
-    const bytes = new Uint8Array(total);
-    let offset = 0;
-    for (const chunk of chunks) {
-        bytes.set(chunk, offset);
-        offset += chunk.byteLength;
-    }
-    return bytes.byteLength === 0 ? undefined : bytes;
-}
-export function createDeploymentDataPlaneFetchHandler(dataPlane, options = {}) {
-    const maximum = maximumBytes(options.maxRequestBytes);
-    return async (request) => {
-        let response;
-        try {
-            const url = new URL(request.url);
-            const headers = fetchHeaders(request.headers);
-            const query = queryParameters(url.searchParams);
-            const body = await fetchBytes(request.body, contentLength(headers, maximum), maximum);
-            const adapted = Object.freeze({
-                method: request.method.toUpperCase(), path: url.pathname, query, headers,
-            });
-            response = await execute(dataPlane, options, adapted, requestInput(query, body, headers['content-type']), request.signal);
-        }
-        catch (error) {
-            response = errorResponse(error);
-        }
-        return new Response(response.body ?? null, { status: response.status, headers: response.headers });
-    };
-}
-function nodeHeaders(request) {
-    const headers = Object.create(null);
-    for (let index = 0; index < request.rawHeaders.length; index += 2) {
-        const name = request.rawHeaders[index].toLowerCase();
-        const value = request.rawHeaders[index + 1];
-        if (name === 'authorization' && headers[name] !== undefined) {
-            throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Authorization header is ambiguous.');
-        }
-        headers[name] = headers[name] === undefined ? value : `${headers[name]}, ${value}`;
-    }
-    return Object.freeze(headers);
-}
-function nodeHasBody(headers) {
-    return headers['transfer-encoding'] !== undefined
-        || headers['content-length'] !== undefined && headers['content-length'] !== '0';
-}
-async function nodeBytes(request, hasBody, declared, maximum) {
-    if (!hasBody)
-        return undefined;
-    const chunks = [];
-    let total = 0;
-    for await (const chunk of request) {
-        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        total += bytes.byteLength;
-        if (total > maximum)
-            throw new AdapterError('HQ_DATA_PLANE_REQUEST_TOO_LARGE', 413, 'The data-plane request exceeds its byte limit.');
-        if (declared !== undefined && total > declared) {
-            throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
-        }
-        chunks.push(bytes);
-    }
-    if (declared !== undefined && total !== declared) {
-        throw new AdapterError('HQ_DATA_PLANE_INPUT_INVALID', 400, 'Request body length is invalid.');
-    }
-    return total === 0 ? undefined : Buffer.concat(chunks, total);
-}
-function sendNodeResponse(response, result) {
-    if (response.writableEnded || response.headersSent)
-        return;
-    response.statusCode = result.status;
-    for (const [name, value] of Object.entries(result.headers))
-        response.setHeader(name, value);
-    response.end(result.body);
-}
-export function createDeploymentDataPlaneNodeHandler(dataPlane, options = {}) {
-    const maximum = maximumBytes(options.maxRequestBytes);
-    return async (request, response) => {
-        const abort = new AbortController();
-        const onRequestClose = () => {
-            if (!request.complete)
-                abort.abort(new Error('The data-plane request was interrupted.'));
-        };
-        const onResponseClose = () => {
-            if (!response.writableEnded)
-                abort.abort(new Error('The data-plane response was interrupted.'));
-        };
-        request.once('close', onRequestClose);
-        response.once('close', onResponseClose);
-        try {
-            const url = new URL(request.url ?? '/', 'http://deployment-data-plane.invalid');
-            const headers = nodeHeaders(request);
-            const query = queryParameters(url.searchParams);
-            const body = await nodeBytes(request, nodeHasBody(headers), contentLength(headers, maximum), maximum);
-            const adapted = Object.freeze({
-                method: (request.method ?? 'GET').toUpperCase(), path: url.pathname, query, headers,
-            });
-            sendNodeResponse(response, await execute(dataPlane, options, adapted, requestInput(query, body, headers['content-type']), abort.signal));
-        }
-        catch (error) {
-            sendNodeResponse(response, errorResponse(error));
-        }
-        finally {
-            request.off('close', onRequestClose);
-            response.off('close', onResponseClose);
-        }
-    };
-}

package/dist/data-plane-limits.d.ts

@@ -1,5 +0,0 @@
-import { type ProtocolSchemaValueLimits } from '@hypequery/protocol';
-export type DeploymentDataPlaneLimits = ProtocolSchemaValueLimits;
-export declare const DEFAULT_DEPLOYMENT_DATA_PLANE_LIMITS: Readonly<ProtocolSchemaValueLimits>;
-export declare function resolveDeploymentDataPlaneLimits(input?: Partial<DeploymentDataPlaneLimits>): Readonly<DeploymentDataPlaneLimits>;
-//# sourceMappingURL=data-plane-limits.d.ts.map

package/dist/data-plane-limits.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-plane-limits.d.ts","sourceRoot":"","sources":["../src/data-plane-limits.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAElE,eAAO,MAAM,oCAAoC,qCAAuC,CAAC;AAEzF,wBAAgB,gCAAgC,CAC9C,KAAK,GAAE,OAAO,CAAC,yBAAyB,CAAM,GAC7C,QAAQ,CAAC,yBAAyB,CAAC,CAErC"}

package/dist/data-plane-limits.js

@@ -1,5 +0,0 @@
-import { DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS, resolveProtocolSchemaValueLimits, } from '@hypequery/protocol';
-export const DEFAULT_DEPLOYMENT_DATA_PLANE_LIMITS = DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS;
-export function resolveDeploymentDataPlaneLimits(input = {}) {
-    return resolveProtocolSchemaValueLimits({ limits: input });
-}

package/dist/data-plane-runtime.d.ts

@@ -1,13 +0,0 @@
-import type { ProtocolDeploymentReleaseTarget } from '@hypequery/protocol';
-import type { DeploymentRuntimeReferenceExecutionInput } from './data-plane.js';
-import type { DeploymentRuntimeSupervisor } from './runtime-supervisor.js';
-export interface DeploymentRuntimeSupervisorExecutorOptions {
-    readonly supervisor: DeploymentRuntimeSupervisor;
-    readonly target: ProtocolDeploymentReleaseTarget;
-    /** The immutable activation generation used to build the matching data plane. */
-    readonly activationRevision: string;
-    /** Convert provider-neutral execution context into the runtime handler's argument contract. */
-    readonly argument: (input: DeploymentRuntimeReferenceExecutionInput) => unknown;
-}
-export declare function createDeploymentRuntimeSupervisorExecutor(options: DeploymentRuntimeSupervisorExecutorOptions): (input: DeploymentRuntimeReferenceExecutionInput) => Promise<unknown>;
-//# sourceMappingURL=data-plane-runtime.d.ts.map

package/dist/data-plane-runtime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"data-plane-runtime.d.ts","sourceRoot":"","sources":["../src/data-plane-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EACV,wCAAwC,EACzC,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE3E,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC;IACjD,iFAAiF;IACjF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,wCAAwC,KAAK,OAAO,CAAC;CACjF;AAED,wBAAgB,yCAAyC,CACvD,OAAO,EAAE,0CAA0C,GAClD,CAAC,KAAK,EAAE,wCAAwC,KAAK,OAAO,CAAC,OAAO,CAAC,CAWvE"}

package/dist/data-plane-runtime.js

@@ -1,12 +0,0 @@
-export function createDeploymentRuntimeSupervisorExecutor(options) {
-    if (!/^[0-9a-f]{64}$/.test(options.activationRevision)) {
-        throw new RangeError('activationRevision must be a lowercase SHA-256 identity');
-    }
-    return async (input) => await options.supervisor.invoke({
-        target: options.target,
-        activationRevision: options.activationRevision,
-        query: input.query.name,
-        argument: options.argument(input),
-        signal: input.signal,
-    });
-}