@hypequery/protocol-conformance 0.0.0-canary-20260722115402

package/fixtures/deployments-v1/README.md

@@ -0,0 +1,77 @@
+# Deployment contract v1 fixtures
+
+- `success.json` contains complete contracts accepted by the v1 validator.
+- `rejections.json` maps generated invalid inputs to stable failure codes.
+- `identity.json` fixes the RFC 8785 canonical bytes and domain-separated
+  SHA-256 identity for matching success fixture ids.
+
+These fixtures exercise RFC 0006 deployment envelopes. `success.json`
+contains language-neutral accepted values. `rejections.json` identifies
+deterministic generated inputs and the stable error code every conforming
+implementation must return.
+
+## Generated rejection semantics
+
+Every rejection is a deterministic transform of this pinned base deployment
+(RFC 0012), where `dataset(name)` denotes:
+
+```json
+{
+  "name": "<name>",
+  "source": "orders",
+  "tenant": { "kind": "not-required" },
+  "dimensions": [],
+  "measures": [],
+  "filters": [],
+  "metrics": [],
+  "relationships": []
+}
+```
+
+and the base is:
+
+```json
+{
+  "kind": "hypequery-deployment",
+  "version": 1,
+  "datasets": [dataset("orders")],
+  "queries": [],
+  "artifacts": []
+}
+```
+
+Generator types expand as follows:
+
+- `wrong-root-type`: an empty array instead of an object;
+- `unknown-root-field`: the base plus `"extra": true`;
+- `unsupported-version`: the base with `"version": 2`;
+- `invalid-dataset-identifier`: the base with its only dataset replaced by
+  `dataset("bad-name")` (hyphens are not valid identifier characters);
+- `invalid-relationship-queryability`: the base with its only dataset given
+  one relationship
+  `{ "name": "items", "kind": "hasMany", "target": "orders", "from": "id",
+  "to": "order_id", "queryable": true }` (a `hasMany` relationship must not
+  be queryable);
+- `missing-runtime-artifact`: the base plus one named query `health` with
+  input `{ "kind": "any" }`, output `{ "kind": "any" }`, implementation
+  `{ "kind": "runtime-reference", "runtime": "node", "artifactSha256":
+  <64 zeros>, "entrypoint": "queries.health" }`, endpoint
+  `{ "access": { "kind": "public" }, "tenant": { "kind": "not-required" },
+  "method": "GET", "path": "/health" }`, and `"tags": []` — while
+  `artifacts` stays empty, so the referenced artifact does not exist;
+- `ambiguous-query-route`: the base plus two named queries `first` and
+  `second`, each with input `{ "kind": "void" }`, output
+  `{ "kind": "void" }`, implementation `{ "kind": "semantic-plan",
+  "query": { "kind": "dataset", "dataset": "orders", "dimensions": [],
+  "measures": [], "filters": [], "orderBy": [] } }`, endpoint
+  `{ "access": { "kind": "public" }, "tenant": { "kind": "not-required" },
+  "method": "GET", "path": "/same" }`, and `"tags": []` — both share one
+  method and path;
+- `too-many-datasets`: the base with 101 datasets `dataset("dataset_0")`
+  through `dataset("dataset_100")`;
+- `source-too-large`: the base with its only dataset's `source` replaced by
+  1025 repetitions of `a`;
+- `unsafe-accessor`: the base with `kind` served by an enumerable computed
+  accessor returning `"hypequery-deployment"` instead of a plain data
+  property. Host-model conditional (RFC 0012): implementations whose input
+  model cannot express computed accessors skip this case.

package/fixtures/deployments-v1/identity.json

@@ -0,0 +1,7 @@
+[
+  {
+    "id": "dataset-and-runtime-query",
+    "canonical": "{\"artifacts\":[{\"artifactSha256\":\"0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\",\"runtime\":\"node\"}],\"datasets\":[{\"dimensions\":[{\"filterable\":true,\"groupable\":true,\"name\":\"status\",\"source\":{\"column\":\"status\",\"kind\":\"column\"},\"type\":\"string\"}],\"endpoint\":{\"access\":{\"kind\":\"authenticated\",\"roles\":[],\"scopes\":[\"read:orders\"]},\"maxLimit\":1000,\"path\":\"/api/analytics/datasets/orders/query\",\"tenant\":{\"column\":\"tenant_id\",\"kind\":\"required\",\"mode\":\"auto-inject\"}},\"filters\":[{\"field\":\"status\",\"name\":\"status\",\"operators\":[\"eq\",\"neq\"]}],\"limits\":{\"maxResultSize\":1000},\"measures\":[{\"aggregation\":\"sum\",\"field\":\"amount\",\"filters\":[],\"name\":\"revenue\"}],\"metrics\":[],\"name\":\"orders\",\"relationships\":[],\"source\":\"analytics.orders\",\"tenant\":{\"field\":\"tenant_id\",\"kind\":\"required\"},\"timeField\":\"created_at\"}],\"kind\":\"hypequery-deployment\",\"queries\":[{\"endpoint\":{\"access\":{\"kind\":\"public\"},\"method\":\"GET\",\"path\":\"/api/analytics/queries/health\",\"tenant\":{\"kind\":\"not-required\"}},\"implementation\":{\"artifactSha256\":\"0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\",\"entrypoint\":\"queries.health\",\"kind\":\"runtime-reference\",\"runtime\":\"node\"},\"input\":{\"kind\":\"any\"},\"name\":\"health\",\"output\":{\"kind\":\"object\",\"properties\":{\"ok\":{\"kind\":\"boolean\"}},\"required\":[\"ok\"],\"unknownProperties\":\"strip\"},\"tags\":[\"system\"]}],\"version\":1}",
+    "sha256": "1ec521ddeb1bf29205a2c0e2876b24b0eab49c0002825bc569071fbf6ad23e2d"
+  }
+]

package/fixtures/deployments-v1/rejections.json

@@ -0,0 +1,12 @@
+[
+  { "id": "wrong-root-type", "generator": { "type": "wrong-root-type" }, "error": "HQ_DEPLOYMENT_TYPE" },
+  { "id": "unknown-root-field", "generator": { "type": "unknown-root-field" }, "error": "HQ_DEPLOYMENT_UNKNOWN_FIELD" },
+  { "id": "unsupported-version", "generator": { "type": "unsupported-version" }, "error": "HQ_DEPLOYMENT_INVALID_VERSION" },
+  { "id": "invalid-dataset-identifier", "generator": { "type": "invalid-dataset-identifier" }, "error": "HQ_DEPLOYMENT_INVALID_IDENTIFIER" },
+  { "id": "invalid-relationship-queryability", "generator": { "type": "invalid-relationship-queryability" }, "error": "HQ_DEPLOYMENT_INVALID_VALUE" },
+  { "id": "missing-runtime-artifact", "generator": { "type": "missing-runtime-artifact" }, "error": "HQ_DEPLOYMENT_INVALID_REFERENCE" },
+  { "id": "ambiguous-query-route", "generator": { "type": "ambiguous-query-route" }, "error": "HQ_DEPLOYMENT_INVALID_VALUE" },
+  { "id": "too-many-datasets", "generator": { "type": "too-many-datasets" }, "error": "HQ_DEPLOYMENT_TOO_MANY_ITEMS" },
+  { "id": "source-too-large", "generator": { "type": "source-too-large" }, "error": "HQ_DEPLOYMENT_TOO_LARGE" },
+  { "id": "unsafe-accessor", "generator": { "type": "unsafe-accessor" }, "error": "HQ_DEPLOYMENT_UNSAFE_OBJECT" }
+]

package/fixtures/deployments-v1/success.json

@@ -0,0 +1,81 @@
+[
+  {
+    "id": "dataset-and-runtime-query",
+    "value": {
+      "kind": "hypequery-deployment",
+      "version": 1,
+      "datasets": [
+        {
+          "name": "orders",
+          "source": "analytics.orders",
+          "tenant": { "kind": "required", "field": "tenant_id" },
+          "timeField": "created_at",
+          "dimensions": [
+            {
+              "name": "status",
+              "type": "string",
+              "source": { "kind": "column", "column": "status" },
+              "filterable": true,
+              "groupable": true
+            }
+          ],
+          "measures": [
+            {
+              "name": "revenue",
+              "aggregation": "sum",
+              "field": "amount",
+              "filters": []
+            }
+          ],
+          "filters": [
+            {
+              "name": "status",
+              "field": "status",
+              "operators": ["eq", "neq"]
+            }
+          ],
+          "metrics": [],
+          "relationships": [],
+          "limits": { "maxResultSize": 1000 },
+          "endpoint": {
+            "access": { "kind": "authenticated", "roles": [], "scopes": ["read:orders"] },
+            "tenant": { "kind": "required", "mode": "auto-inject", "column": "tenant_id" },
+            "maxLimit": 1000,
+            "path": "/api/analytics/datasets/orders/query"
+          }
+        }
+      ],
+      "queries": [
+        {
+          "name": "health",
+          "input": { "kind": "any" },
+          "output": {
+            "kind": "object",
+            "properties": { "ok": { "kind": "boolean" } },
+            "required": ["ok"],
+            "unknownProperties": "strip"
+          },
+          "implementation": {
+            "kind": "runtime-reference",
+            "runtime": "node",
+            "artifactSha256": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+            "entrypoint": "queries.health"
+          },
+          "endpoint": {
+            "access": { "kind": "public" },
+            "tenant": { "kind": "not-required" },
+            "method": "GET",
+            "path": "/api/analytics/queries/health"
+          },
+          "tags": ["system"]
+        }
+      ],
+      "artifacts": [
+        {
+          "runtime": "node",
+          "artifactSha256": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
+        }
+      ]
+    }
+  }
+]

package/fixtures/expressions-v1/README.md

@@ -0,0 +1,25 @@
+# Portable expression fixtures, version 1
+
+These fixtures accompany RFC 0003. `success.json` exercises every closed
+operator registry and both semantic query envelopes. `rejections.json` covers
+every stable failure code; generator entries describe inputs that are awkward
+or unsafe to encode directly as JSON.
+
+## Generated rejection semantics
+
+Rejection entries carry exactly one of `value` or `generator`, a `mode`
+(`expression` or `query`) selecting the validated surface, and the required
+stable `error` code. Generator types expand as follows (RFC 0012), where
+`literal` denotes `{ "kind": "literal", "value": false }`:
+
+- `nested-not`: wraps `literal` in
+  `{ "kind": "logical", "operator": "not", "operand": ... }` `depth` times;
+- `logical-operands`: one
+  `{ "kind": "logical", "operator": "and", "operands": [...] }` node whose
+  operands are `count` copies of `literal`;
+- `logical-tree`: one `and` node whose operands are 10 `and` nodes, each
+  with 100 copies of `literal` as operands (1011 nodes total);
+- `unsafe-accessor`: `{ "kind": "reference" }` with `name` served by an
+  enumerable computed accessor returning `"orders"` instead of a plain data
+  property. Host-model conditional (RFC 0012): implementations whose input
+  model cannot express computed accessors skip this case.

package/fixtures/expressions-v1/rejections.json

@@ -0,0 +1,17 @@
+[
+  { "id": "expression-not-object", "mode": "expression", "value": null, "error": "HQ_EXPRESSION_TYPE" },
+  { "id": "expression-unknown-field", "mode": "expression", "value": { "kind": "reference", "name": "orders", "extra": true }, "error": "HQ_EXPRESSION_UNKNOWN_FIELD" },
+  { "id": "expression-unknown-kind", "mode": "expression", "value": { "kind": "sql", "value": "select 1" }, "error": "HQ_EXPRESSION_UNKNOWN_KIND" },
+  { "id": "expression-invalid-identifier", "mode": "expression", "value": { "kind": "reference", "name": "customer..country" }, "error": "HQ_EXPRESSION_INVALID_IDENTIFIER" },
+  { "id": "expression-invalid-canonical-value", "mode": "expression", "value": { "kind": "literal", "value": [42] }, "error": "HQ_EXPRESSION_INVALID_VALUE" },
+  { "id": "expression-invalid-operator", "mode": "expression", "value": { "kind": "binary", "operator": "power", "left": { "kind": "literal", "value": 1.5 }, "right": { "kind": "literal", "value": 2.5 } }, "error": "HQ_EXPRESSION_INVALID_OPERATOR" },
+  { "id": "expression-invalid-arity", "mode": "expression", "value": { "kind": "call", "function": "floor", "args": [] }, "error": "HQ_EXPRESSION_INVALID_ARITY" },
+  { "id": "comparison-empty-in-list", "mode": "expression", "value": { "kind": "comparison", "operator": "in", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": { "$hypequery": { "type": "array", "version": 1, "values": [] } } } }, "error": "HQ_EXPRESSION_INVALID_ARITY" },
+  { "id": "comparison-like-non-string", "mode": "expression", "value": { "kind": "comparison", "operator": "like", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": 1.5 } }, "error": "HQ_EXPRESSION_INVALID_VALUE" },
+  { "id": "expression-invalid-aggregation", "mode": "expression", "value": { "kind": "aggregate", "aggregation": "percentile", "field": "amount", "level": 2.0 }, "error": "HQ_EXPRESSION_INVALID_AGGREGATION" },
+  { "id": "query-invalid-grain", "mode": "query", "value": { "kind": "dataset", "dataset": "orders", "by": "hour" }, "error": "HQ_EXPRESSION_INVALID_QUERY" },
+  { "id": "expression-too-deep", "mode": "expression", "generator": { "type": "nested-not", "depth": 17 }, "error": "HQ_EXPRESSION_TOO_DEEP" },
+  { "id": "expression-too-many-nodes", "mode": "expression", "generator": { "type": "logical-tree" }, "error": "HQ_EXPRESSION_TOO_MANY_NODES" },
+  { "id": "expression-too-many-items", "mode": "expression", "generator": { "type": "logical-operands", "count": 101 }, "error": "HQ_EXPRESSION_TOO_MANY_ITEMS" },
+  { "id": "expression-unsafe-accessor", "mode": "expression", "generator": { "type": "unsafe-accessor" }, "error": "HQ_EXPRESSION_UNSAFE_OBJECT" }
+]

package/fixtures/expressions-v1/success.json

@@ -0,0 +1,47 @@
+{
+  "expressions": [
+    { "id": "reference-qualified", "value": { "kind": "reference", "name": "customer.country" } },
+    { "id": "literal-tagged-integers", "value": { "kind": "literal", "value": { "$hypequery": { "type": "array", "version": 1, "values": [{ "$hypequery": { "type": "integer", "version": 1, "bits": 64, "signed": false, "value": "42" } }] } } } },
+    { "id": "binary-add", "value": { "kind": "binary", "operator": "add", "left": { "kind": "reference", "name": "revenue" }, "right": { "kind": "literal", "value": 1.5 } } },
+    { "id": "binary-subtract", "value": { "kind": "binary", "operator": "subtract", "left": { "kind": "reference", "name": "revenue" }, "right": { "kind": "literal", "value": 1.5 } } },
+    { "id": "binary-multiply", "value": { "kind": "binary", "operator": "multiply", "left": { "kind": "reference", "name": "revenue" }, "right": { "kind": "literal", "value": 1.5 } } },
+    { "id": "binary-divide", "value": { "kind": "binary", "operator": "divide", "left": { "kind": "reference", "name": "revenue" }, "right": { "kind": "literal", "value": 1.5 } } },
+    { "id": "call-nullIfZero", "value": { "kind": "call", "function": "nullIfZero", "args": [{ "kind": "reference", "name": "orders" }] } },
+    { "id": "call-coalesce", "value": { "kind": "call", "function": "coalesce", "args": [{ "kind": "reference", "name": "revenue" }, { "kind": "literal", "value": 0.5 }] } },
+    { "id": "call-round", "value": { "kind": "call", "function": "round", "args": [{ "kind": "reference", "name": "revenue" }, { "kind": "literal", "value": 2.0 }] } },
+    { "id": "call-floor", "value": { "kind": "call", "function": "floor", "args": [{ "kind": "reference", "name": "revenue" }] } },
+    { "id": "call-ceil", "value": { "kind": "call", "function": "ceil", "args": [{ "kind": "reference", "name": "revenue" }] } },
+    { "id": "comparison-eq", "value": { "kind": "comparison", "operator": "eq", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": "paid" } } },
+    { "id": "comparison-neq", "value": { "kind": "comparison", "operator": "neq", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": "paid" } } },
+    { "id": "comparison-gt", "value": { "kind": "comparison", "operator": "gt", "left": { "kind": "reference", "name": "amount" }, "right": { "kind": "literal", "value": 10.5 } } },
+    { "id": "comparison-gte", "value": { "kind": "comparison", "operator": "gte", "left": { "kind": "reference", "name": "amount" }, "right": { "kind": "literal", "value": 10.5 } } },
+    { "id": "comparison-lt", "value": { "kind": "comparison", "operator": "lt", "left": { "kind": "reference", "name": "amount" }, "right": { "kind": "literal", "value": 10.5 } } },
+    { "id": "comparison-lte", "value": { "kind": "comparison", "operator": "lte", "left": { "kind": "reference", "name": "amount" }, "right": { "kind": "literal", "value": 10.5 } } },
+    { "id": "comparison-in", "value": { "kind": "comparison", "operator": "in", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": { "$hypequery": { "type": "array", "version": 1, "values": ["paid", "open"] } } } } },
+    { "id": "comparison-notIn", "value": { "kind": "comparison", "operator": "notIn", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": { "$hypequery": { "type": "array", "version": 1, "values": ["void"] } } } } },
+    { "id": "comparison-between", "value": { "kind": "comparison", "operator": "between", "left": { "kind": "reference", "name": "amount" }, "right": { "kind": "literal", "value": { "$hypequery": { "type": "tuple", "version": 1, "values": [1.5, 9.5] } } } } },
+    { "id": "comparison-like", "value": { "kind": "comparison", "operator": "like", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": "paid%" } } },
+    { "id": "logical-and", "value": { "kind": "logical", "operator": "and", "operands": [{ "kind": "comparison", "operator": "eq", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": "paid" } }, { "kind": "comparison", "operator": "gt", "left": { "kind": "reference", "name": "amount" }, "right": { "kind": "literal", "value": 0.5 } }] } },
+    { "id": "logical-or", "value": { "kind": "logical", "operator": "or", "operands": [{ "kind": "literal", "value": true }, { "kind": "literal", "value": false }] } },
+    { "id": "logical-not", "value": { "kind": "logical", "operator": "not", "operand": { "kind": "literal", "value": false } } },
+    { "id": "aggregate-sum-filtered", "value": { "kind": "aggregate", "aggregation": "sum", "field": "amount", "filters": [{ "kind": "comparison", "operator": "eq", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": "paid" } }] } },
+    { "id": "aggregate-count", "value": { "kind": "aggregate", "aggregation": "count", "field": "id" } },
+    { "id": "aggregate-countDistinct", "value": { "kind": "aggregate", "aggregation": "countDistinct", "field": "customer_id" } },
+    { "id": "aggregate-avg", "value": { "kind": "aggregate", "aggregation": "avg", "field": "amount" } },
+    { "id": "aggregate-min", "value": { "kind": "aggregate", "aggregation": "min", "field": "amount" } },
+    { "id": "aggregate-max", "value": { "kind": "aggregate", "aggregation": "max", "field": "amount" } },
+    { "id": "aggregate-argMax", "value": { "kind": "aggregate", "aggregation": "argMax", "field": "status", "argField": "created_at" } },
+    { "id": "aggregate-argMin", "value": { "kind": "aggregate", "aggregation": "argMin", "field": "status", "argField": "created_at" } },
+    { "id": "aggregate-percentile", "value": { "kind": "aggregate", "aggregation": "percentile", "field": "amount", "level": 0.95 } },
+    { "id": "aggregate-median-normalized", "value": { "kind": "aggregate", "aggregation": "percentile", "field": "amount", "level": 0.5 } },
+    { "id": "aggregate-stddev", "value": { "kind": "aggregate", "aggregation": "stddev", "field": "amount" } },
+    { "id": "aggregate-variance", "value": { "kind": "aggregate", "aggregation": "variance", "field": "amount" } }
+  ],
+  "queries": [
+    { "id": "dataset-all-query-features", "value": { "kind": "dataset", "dataset": "orders", "dimensions": ["status", "customer.country"], "measures": ["revenue", "orders"], "filters": [{ "kind": "comparison", "operator": "eq", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": "paid" } }], "orderBy": [{ "field": "customer.country", "direction": "asc" }, { "field": "revenue", "direction": "desc" }], "limit": 100, "offset": 0, "by": "quarter", "includeMeta": true } },
+    { "id": "metric-all-query-features", "value": { "kind": "metric", "dataset": "orders", "metric": "average_order_value", "dimensions": ["customer.country"], "filters": [], "orderBy": [{ "field": "period", "direction": "asc" }], "limit": 25, "offset": 50, "by": "week", "includeMeta": false } },
+    { "id": "grain-day", "value": { "kind": "dataset", "dataset": "orders", "by": "day" } },
+    { "id": "grain-month", "value": { "kind": "dataset", "dataset": "orders", "by": "month" } },
+    { "id": "grain-year", "value": { "kind": "dataset", "dataset": "orders", "by": "year", "limit": 0 } }
+  ]
+}

package/fixtures/fuzz-seeds-v1/README.md

@@ -0,0 +1,29 @@
+# Fuzz seed corpus, version 1
+
+Deterministic adversarial seeds replayed verbatim on every conformance run
+(RFC 0012). A mutating fuzzer is out of scope; this corpus is the foundation
+it would grow. Any input that later crashes an implementation must be
+minimized and added here as a seed.
+
+For every seed an implementation must, within the runner timeout, either
+accept the input or reject it with a stable code matching
+`^HQ_[A-Z0-9_]+$`. It must never crash, hang, or partially execute the
+input, and must enforce documented limits before unbounded allocation.
+
+## Files
+
+- `value-sources.json` targets the tagged-values-v1 decode and validation
+  path. Entries carry an `id` and exactly one of `sourceUtf8` (exact JSON
+  source for a duplicate-aware parser) or `generator` (expanded per the
+  tagged-values-v1 README).
+- `structured-values.json` targets structural validators. Entries carry an
+  `id`, a `value`, and a `targets` array of family names; the seed is
+  replayed once per target family through that family's validate operation.
+- `sql-expressions.json` targets the sql-portability-v1 compiler. Entries
+  carry an `id` and either `sql` (the exact source) or `sqlRepeat`
+  (`{ "value": ..., "count": ... }`, expanded by concatenating `count`
+  copies of `value`, optionally between `prefix` and `suffix`).
+
+Seed ids are unique within one file. Seeds carry no expected code: any
+stable rejection is conforming, and an implementation that accepts a seed
+within its limits also conforms.

package/fixtures/fuzz-seeds-v1/sql-expressions.json

@@ -0,0 +1,32 @@
+[
+  { "id": "empty", "sql": "" },
+  { "id": "whitespace-only", "sql": "   " },
+  { "id": "unbalanced-open-paren", "sql": "((((revenue" },
+  { "id": "unbalanced-close-paren", "sql": "revenue))))" },
+  { "id": "trailing-operator", "sql": "revenue +" },
+  { "id": "leading-operator", "sql": "* revenue" },
+  { "id": "double-operator", "sql": "revenue + * cost" },
+  { "id": "empty-parens", "sql": "()" },
+  { "id": "bare-comma", "sql": "," },
+  { "id": "statement-select", "sql": "SELECT 1" },
+  { "id": "statement-with-semicolon", "sql": "revenue; DROP TABLE orders" },
+  { "id": "line-comment", "sql": "revenue -- comment" },
+  { "id": "block-comment", "sql": "revenue /* comment */" },
+  { "id": "nested-block-comment", "sql": "/* a /* b */ c */ revenue" },
+  { "id": "unlisted-function", "sql": "toStartOfDay(created_at)" },
+  { "id": "lambda", "sql": "arrayMap(x -> x + 1, items)" },
+  { "id": "subquery", "sql": "revenue IN (SELECT id FROM t)" },
+  { "id": "cast-double-colon", "sql": "revenue::Float64" },
+  { "id": "backslash-escape", "sql": "'a\\'b'" },
+  { "id": "unterminated-string", "sql": "'abc" },
+  { "id": "unterminated-backtick", "sql": "`col" },
+  { "id": "non-literal-in-list", "sql": "revenue IN (cost, margin)" },
+  { "id": "non-literal-between", "sql": "revenue BETWEEN cost AND margin" },
+  { "id": "unicode-operator", "sql": "revenue ≥ 10" },
+  { "id": "null-byte-literal", "sql": "revenue = 'a\\u0000b'" },
+  { "id": "deep-nested-parens", "sqlRepeat": { "prefix": "", "value": "(", "suffix": "revenue", "count": 512 } },
+  { "id": "deep-nested-not", "sqlRepeat": { "prefix": "", "value": "NOT ", "suffix": "revenue = 1", "count": 512 } },
+  { "id": "long-and-chain", "sqlRepeat": { "prefix": "revenue = 1", "value": " AND revenue = 1", "suffix": "", "count": 2000 } },
+  { "id": "long-identifier", "sqlRepeat": { "prefix": "", "value": "a", "suffix": "", "count": 100000 } },
+  { "id": "long-literal-list", "sqlRepeat": { "prefix": "revenue IN (", "value": "1,", "suffix": "1)", "count": 5000 } }
+]

package/fixtures/fuzz-seeds-v1/structured-values.json

@@ -0,0 +1,32 @@
+[
+  { "id": "empty-object", "value": {}, "targets": ["expressions-v1", "query-schemas-v1", "query-events-v1", "query-diagnostics-v1", "query-implementations-v1", "deployments-v1"] },
+  { "id": "null-root", "value": null, "targets": ["expressions-v1", "query-schemas-v1", "query-events-v1", "query-diagnostics-v1"] },
+  { "id": "array-root", "value": [], "targets": ["expressions-v1", "query-schemas-v1", "query-events-v1", "query-diagnostics-v1", "deployments-v1"] },
+  { "id": "string-root", "value": "hello", "targets": ["expressions-v1", "query-schemas-v1", "query-events-v1"] },
+  { "id": "number-root", "value": 42, "targets": ["expressions-v1", "query-schemas-v1", "query-events-v1"] },
+  { "id": "unknown-kind", "value": { "kind": "no-such-kind" }, "targets": ["expressions-v1", "query-schemas-v1", "query-implementations-v1"] },
+  { "id": "kind-wrong-type", "value": { "kind": 5 }, "targets": ["expressions-v1", "query-schemas-v1", "query-implementations-v1"] },
+  { "id": "proto-pollution-key", "value": { "kind": "any", "__proto__": { "polluted": true } }, "targets": ["query-schemas-v1", "expressions-v1"] },
+  { "id": "constructor-key", "value": { "kind": "any", "constructor": { "prototype": {} } }, "targets": ["query-schemas-v1", "expressions-v1"] },
+  { "id": "prototype-key", "value": { "kind": "any", "prototype": {} }, "targets": ["query-schemas-v1"] },
+  { "id": "extra-unknown-field", "value": { "kind": "any", "surpriseField": true }, "targets": ["query-schemas-v1", "query-events-v1", "query-diagnostics-v1"] },
+  { "id": "deep-array-schema", "value": { "kind": "array", "items": { "kind": "array", "items": { "kind": "array", "items": { "kind": "array", "items": { "kind": "any" } } } } }, "targets": ["query-schemas-v1"] },
+  { "id": "reference-missing-name", "value": { "kind": "reference" }, "targets": ["expressions-v1"] },
+  { "id": "reference-empty-name", "value": { "kind": "reference", "name": "" }, "targets": ["expressions-v1"] },
+  { "id": "reference-injection-name", "value": { "kind": "reference", "name": "a`; DROP TABLE t; --" }, "targets": ["expressions-v1"] },
+  { "id": "reference-dotted-name", "value": { "kind": "reference", "name": "a.b.c.d.e.f.g.h.i.j" }, "targets": ["expressions-v1"] },
+  { "id": "literal-huge-number", "value": { "kind": "literal", "value": 1e308 }, "targets": ["expressions-v1"] },
+  { "id": "literal-object-value", "value": { "kind": "literal", "value": { "nested": true } }, "targets": ["expressions-v1"] },
+  { "id": "logical-empty-operands", "value": { "kind": "logical", "operator": "and", "operands": [] }, "targets": ["expressions-v1"] },
+  { "id": "logical-null-operand", "value": { "kind": "logical", "operator": "and", "operands": [null] }, "targets": ["expressions-v1"] },
+  { "id": "enum-duplicate-values", "value": { "kind": "enum", "values": ["a", "a", "a"] }, "targets": ["query-schemas-v1"] },
+  { "id": "enum-non-string-values", "value": { "kind": "enum", "values": [1, 2, 3] }, "targets": ["query-schemas-v1"] },
+  { "id": "object-required-not-array", "value": { "kind": "object", "properties": {}, "required": "id", "unknownProperties": "reject" }, "targets": ["query-schemas-v1"] },
+  { "id": "unicode-identifier-confusable", "value": { "kind": "reference", "name": "аdmin" }, "targets": ["expressions-v1"] },
+  { "id": "event-kind-only", "value": { "kind": "hypequery-query-event" }, "targets": ["query-events-v1"] },
+  { "id": "diagnostics-kind-only", "value": { "kind": "hypequery-query-diagnostics" }, "targets": ["query-diagnostics-v1"] },
+  { "id": "deployment-kind-only", "value": { "kind": "hypequery-deployment" }, "targets": ["deployments-v1"] },
+  { "id": "implementation-kind-only", "value": { "kind": "compiled-sql" }, "targets": ["query-implementations-v1"] },
+  { "id": "negative-version", "value": { "kind": "hypequery-query-event", "version": -1 }, "targets": ["query-events-v1"] },
+  { "id": "float-version", "value": { "kind": "hypequery-query-event", "version": 1.5 }, "targets": ["query-events-v1"] }
+]

package/fixtures/fuzz-seeds-v1/value-sources.json

@@ -0,0 +1,191 @@
+[
+  {
+    "id": "empty-source",
+    "sourceUtf8": ""
+  },
+  {
+    "id": "whitespace-only",
+    "sourceUtf8": "   \n\t  "
+  },
+  {
+    "id": "unbalanced-array-open",
+    "sourceUtf8": "[[[["
+  },
+  {
+    "id": "unbalanced-object-open",
+    "sourceUtf8": "{\"a\":{\"b\":{"
+  },
+  {
+    "id": "unbalanced-close",
+    "sourceUtf8": "]}"
+  },
+  {
+    "id": "truncated-string",
+    "sourceUtf8": "\"abc"
+  },
+  {
+    "id": "truncated-escape",
+    "sourceUtf8": "\"ab\\"
+  },
+  {
+    "id": "truncated-unicode-escape",
+    "sourceUtf8": "\"\\u00"
+  },
+  {
+    "id": "lone-high-surrogate-escape",
+    "sourceUtf8": "\"\\ud800\""
+  },
+  {
+    "id": "lone-low-surrogate-escape",
+    "sourceUtf8": "\"\\udc00\""
+  },
+  {
+    "id": "swapped-surrogate-pair",
+    "sourceUtf8": "\"\\udc00\\ud800\""
+  },
+  {
+    "id": "bom-prefix",
+    "sourceUtf8": "{}"
+  },
+  {
+    "id": "bare-plus-number",
+    "sourceUtf8": "+1"
+  },
+  {
+    "id": "leading-zero-number",
+    "sourceUtf8": "01"
+  },
+  {
+    "id": "trailing-dot-number",
+    "sourceUtf8": "1."
+  },
+  {
+    "id": "hex-number",
+    "sourceUtf8": "0x10"
+  },
+  {
+    "id": "bare-nan",
+    "sourceUtf8": "NaN"
+  },
+  {
+    "id": "bare-infinity",
+    "sourceUtf8": "Infinity"
+  },
+  {
+    "id": "single-quoted-string",
+    "sourceUtf8": "'abc'"
+  },
+  {
+    "id": "trailing-comma-array",
+    "sourceUtf8": "[1,]"
+  },
+  {
+    "id": "trailing-comma-object",
+    "sourceUtf8": "{\"a\":1,}"
+  },
+  {
+    "id": "duplicate-key-triple",
+    "sourceUtf8": "{\"a\":1,\"a\":2,\"a\":3}"
+  },
+  {
+    "id": "duplicate-key-nested",
+    "sourceUtf8": "{\"o\":{\"k\":1,\"k\":2}}"
+  },
+  {
+    "id": "line-comment",
+    "sourceUtf8": "1 // comment"
+  },
+  {
+    "id": "block-comment",
+    "sourceUtf8": "/* c */ 1"
+  },
+  {
+    "id": "escaped-null-in-string",
+    "sourceUtf8": "\"a\\u0000b\""
+  },
+  {
+    "id": "raw-tab-in-string",
+    "sourceUtf8": "\"ab\tcd\""
+  },
+  {
+    "id": "proto-key",
+    "sourceUtf8": "{\"__proto__\":{\"polluted\":true}}"
+  },
+  {
+    "id": "constructor-key",
+    "sourceUtf8": "{\"constructor\":{\"prototype\":{}}}"
+  },
+  {
+    "id": "tag-lookalike-unknown",
+    "sourceUtf8": "{\"$hypequery\":\"no-such-tag\",\"value\":\"1\"}"
+  },
+  {
+    "id": "tag-lookalike-case",
+    "sourceUtf8": "{\"$HYPEQUERY\":\"int64\",\"value\":\"1\"}"
+  },
+  {
+    "id": "huge-exponent",
+    "sourceUtf8": "1e309"
+  },
+  {
+    "id": "negative-huge-exponent",
+    "sourceUtf8": "-1e309"
+  },
+  {
+    "id": "tiny-exponent",
+    "sourceUtf8": "1e-324"
+  },
+  {
+    "id": "mixed-normalization-keys",
+    "sourceUtf8": "{\"café\":1,\"café\":2}"
+  },
+  {
+    "id": "long-digit-run",
+    "generator": {
+      "type": "repeat-string",
+      "utf8": "9",
+      "count": 20000
+    }
+  },
+  {
+    "id": "deep-array-nesting",
+    "generator": {
+      "type": "nested-array",
+      "depth": 64,
+      "leaf": null
+    }
+  },
+  {
+    "id": "wide-array",
+    "generator": {
+      "type": "array",
+      "items": 5000,
+      "value": null
+    }
+  },
+  {
+    "id": "node-explosion-tree",
+    "generator": {
+      "type": "array-tree",
+      "branches": 64,
+      "itemsPerBranch": 512,
+      "value": null
+    }
+  },
+  {
+    "id": "oversized-string",
+    "generator": {
+      "type": "repeat-string",
+      "utf8": "a",
+      "count": 131072
+    }
+  },
+  {
+    "id": "multibyte-oversized-string",
+    "generator": {
+      "type": "repeat-string",
+      "utf8": "é",
+      "count": 65537
+    }
+  }
+]

package/fixtures/identifiers-v1/README.md

@@ -0,0 +1,15 @@
+# Portable identifier version 1 fixtures
+
+These draft language-neutral fixtures accompany RFC 0002.
+
+Success entries contain an `id`, a `mode` (`simple` or `qualified`), the exact
+`value`, and the expected `segments`. Rejection entries contain exactly one of
+`value` or `generator` and the required stable `error` code.
+
+Generators expand as follows:
+
+- `repeat-string`: concatenates `count` copies of `value`;
+- `qualified-segments`: joins `count` copies of `segment` with `.`.
+
+Fixture consumers must preserve accepted strings exactly. They must not trim,
+case-fold, normalize, or reinterpret qualified identifiers as SQL names.