@hypequery/protocol-conformance 0.10.4 → 0.11.0

package/dist/adapters/generators.d.ts

@@ -4,6 +4,7 @@ export declare function materializeIdentifier(spec: Spec): string;
 export declare function materializeExpression(spec: Spec): unknown;
 export declare function materializeSchema(spec: Spec): unknown;
 export declare function materializeImplementation(spec: Spec): unknown;
+export declare function materializeSemanticInvocation(spec: Spec): unknown;
 export declare function materializeEvent(spec: Spec): unknown;
 export declare function materializeDiagnostics(spec: Spec): unknown;
 export declare function materializeDeployment(spec: Spec): unknown;

package/dist/adapters/generators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generators.d.ts","sourceRoot":"","sources":["../../src/adapters/generators.ts"],"names":[],"mappings":"AAIA,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAkBpC,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAuC1D;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAMxD;AAMD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAiCzD;AAID,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CA2BrD;AAgBD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAuB7D;AAkBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAyBpD;AAeD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAoB1D;AA2BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAwDzD;AAkBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAmBrD;AAaD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAgBtD"}
+{"version":3,"file":"generators.d.ts","sourceRoot":"","sources":["../../src/adapters/generators.ts"],"names":[],"mappings":"AAIA,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAkBpC,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAuC1D;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAMxD;AAMD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAoCzD;AAID,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CA2BrD;AAgBD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAuB7D;AA4CD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAsFjE;AAkBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAyBpD;AAeD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAoB1D;AA2BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAyFzD;AAkBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAmBrD;AAaD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAgBtD"}

package/dist/adapters/generators.js

@@ -83,10 +83,10 @@ export function materializeExpression(spec) {
             return {
                 kind: 'logical',
                 operator: 'and',
-                operands: Array.from({ length: 10 }, () => ({
+                operands: Array.from({ length: 10 }, (_, groupIndex) => ({
                     kind: 'logical',
                     operator: 'and',
-                    operands: Array.from({ length: 100 }, () => ({ ...EXPR_LITERAL })),
+                    operands: Array.from({ length: groupIndex === 9 ? spec.lastGroupItems : 100 }, () => ({ ...EXPR_LITERAL })),
                 })),
             };
         case 'unsafe-accessor': {
@@ -162,6 +162,134 @@ export function materializeImplementation(spec) {
             throw new Error(`Unknown implementation generator: ${String(spec.type)}`);
     }
 }
+// --- semantic-invocations-v1 ---
+const INVOCATION_REVISION = '0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef';
+const INVOCATION_LIMITS = {
+    maxRows: 10_000,
+    maxColumnsPerRow: 256,
+    maxValueBytes: 65_536,
+    maxDeadlineMs: 3_600_000,
+    maxMessageBytes: 1_024,
+};
+function baseInvocation() {
+    return {
+        kind: 'hypequery-semantic-invocation',
+        version: 1,
+        target: { project: 'acme', environment: 'production' },
+        operation: { kind: 'dataset', dataset: 'orders', measures: ['revenue'] },
+    };
+}
+function baseInvocationResult() {
+    return {
+        kind: 'hypequery-semantic-invocation-result',
+        version: 1,
+        activationRevision: INVOCATION_REVISION,
+        data: [{ status: 'paid' }],
+        meta: { rowCount: 1 },
+    };
+}
+function baseInvocationFailure() {
+    return {
+        kind: 'hypequery-semantic-invocation-failure',
+        version: 1,
+        category: 'input-invalid',
+        code: 'HQ_SEMANTIC_UNKNOWN_DIMENSION',
+        message: 'The semantic query is invalid.',
+        retryable: false,
+        relist: false,
+    };
+}
+export function materializeSemanticInvocation(spec) {
+    switch (spec.type) {
+        case 'wrong-root-type': return [];
+        case 'unknown-root-field': return { ...baseInvocation(), extra: true };
+        case 'unsupported-version': return { ...baseInvocation(), version: 2 };
+        // A caller can never name a tenant; the field does not exist in the record.
+        case 'caller-supplied-tenant': return { ...baseInvocation(), tenant: 'acme' };
+        // Identifiers are normalized into `operation`; a second copy could disagree.
+        case 'redundant-operation-dataset': return { ...baseInvocation(), dataset: 'orders' };
+        case 'malformed-activation-revision':
+            return { ...baseInvocation(), activationRevision: 'not-a-digest' };
+        case 'empty-budget': return { ...baseInvocation(), budget: {} };
+        case 'zero-deadline': return { ...baseInvocation(), budget: { deadlineMs: 0 } };
+        case 'deadline-too-large':
+            return { ...baseInvocation(), budget: { deadlineMs: INVOCATION_LIMITS.maxDeadlineMs + 1 } };
+        case 'correlation-id-control-character':
+            return { ...baseInvocation(), correlationId: 'req\u0007id' };
+        case 'unsafe-accessor': {
+            const unsafe = baseInvocation();
+            Object.defineProperty(unsafe, 'kind', {
+                enumerable: true,
+                get: () => 'hypequery-semantic-invocation',
+            });
+            return unsafe;
+        }
+        case 'too-many-rows': {
+            const rows = INVOCATION_LIMITS.maxRows + 1;
+            return {
+                ...baseInvocationResult(),
+                data: Array.from({ length: rows }, () => ({ status: 'paid' })),
+                meta: { rowCount: rows },
+            };
+        }
+        case 'too-many-columns':
+            return {
+                ...baseInvocationResult(),
+                data: [Object.fromEntries(Array.from({ length: INVOCATION_LIMITS.maxColumnsPerRow + 1 }, (_, i) => [`c${i}`, i]))],
+            };
+        case 'non-finite-cell':
+            return { ...baseInvocationResult(), data: [{ revenue: Number.POSITIVE_INFINITY }] };
+        case 'nested-cell':
+            return { ...baseInvocationResult(), data: [{ breakdown: { paid: 1 } }] };
+        case 'cell-too-large':
+            return {
+                ...baseInvocationResult(),
+                data: [{ note: repeat('a', INVOCATION_LIMITS.maxValueBytes + 1) }],
+            };
+        case 'row-count-mismatch':
+            return { ...baseInvocationResult(), meta: { rowCount: 9 } };
+        case 'sparse-data-array': {
+            const data = [{ status: 'paid' }];
+            data.length = 3;
+            return { ...baseInvocationResult(), data, meta: { rowCount: 3 } };
+        }
+        case 'unknown-failure-category':
+            return { ...baseInvocationFailure(), category: 'exploded' };
+        case 'provider-shaped-failure-code':
+            return { ...baseInvocationFailure(), code: 'ClickHouseException: DB::Exception' };
+        case 'cell-control-character': {
+            return { ...baseInvocationResult(), data: [{ status: 'paid\u0007' }] };
+        }
+        case 'provider-shaped-failure-message': {
+            return { ...baseInvocationFailure(), message: 'SELECT * FROM private.orders WHERE tenant = acme' };
+        }
+        case 'custom-prototype-data-array': {
+            return { ...baseInvocationResult(), data: Object.setPrototypeOf([{ status: 'paid' }], {}) };
+        }
+        case 'accessor-data-array': {
+            const data = [{ status: 'paid' }];
+            Object.defineProperty(data, '0', { enumerable: true, get() { throw new Error('Getter must not execute'); } });
+            return { ...baseInvocationResult(), data };
+        }
+        case 'hidden-data-array-property': {
+            const data = [{ status: 'paid' }];
+            Object.defineProperty(data, 'hidden', { value: true });
+            return { ...baseInvocationResult(), data };
+        }
+        case 'symbol-data-array-property': {
+            const data = [{ status: 'paid' }];
+            Object.defineProperty(data, Symbol('hidden'), { value: true });
+            return { ...baseInvocationResult(), data };
+        }
+        case 'failure-message-too-large':
+            return {
+                ...baseInvocationFailure(),
+                message: repeat('a', INVOCATION_LIMITS.maxMessageBytes + 1),
+            };
+        default:
+            throw new Error(`Unknown semantic invocation generator: ${String(spec.type)}`);
+    }
+}
 // --- query-events-v1 ---
 function baseEvent() {
     return {
@@ -307,8 +435,41 @@ export function materializeDeployment(spec) {
             });
             return { ...value, queries: [namedQuery('first'), namedQuery('second')] };
         }
+        case 'invalid-sensitivity':
+            return { ...value, datasets: [{ ...minimalDataset(), sensitivity: 'secret' }] };
+        case 'invalid-currency':
+            return { ...value, datasets: [{ ...minimalDataset(), currency: 'usd' }] };
+        case 'empty-defaults':
+            return { ...value, datasets: [{ ...minimalDataset(), defaults: {} }] };
+        case 'default-dimension-not-groupable':
+            return {
+                ...value,
+                datasets: [{
+                        ...minimalDataset(),
+                        dimensions: [{
+                                name: 'status',
+                                type: 'string',
+                                source: { kind: 'column', column: 'status' },
+                                filterable: true,
+                                groupable: false,
+                            }],
+                        defaults: { dimensions: ['status'] },
+                    }],
+            };
+        case 'default-grain-without-time-field':
+            // `timeGrain` has nothing to apply to unless the dataset declares
+            // `timeField`, so the reference reports it as a broken reference.
+            return { ...value, datasets: [{ ...minimalDataset(), defaults: { timeGrain: 'day' } }] };
         case 'too-many-datasets':
             return { ...value, datasets: Array.from({ length: 101 }, (_, i) => minimalDataset(`dataset_${i}`)) };
+        case 'too-many-synonyms':
+            return {
+                ...value,
+                datasets: [{
+                        ...minimalDataset(),
+                        synonyms: Array.from({ length: 101 }, (_, i) => `synonym_${i}`),
+                    }],
+            };
         case 'source-too-large':
             return { ...value, datasets: [{ ...minimalDataset(), source: repeat('a', 1_025) }] };
         case 'unsafe-accessor': {

package/dist/adapters/reference.d.ts

@@ -9,7 +9,7 @@ export declare const REFERENCE_HOSTILE_OBJECT_SUITE: {
     readonly count: 7;
     readonly mechanisms: readonly ["getter", "toJSON", "proxy", "custom-prototype", "symbol-key", "sparse-array", "cycle"];
 };
-export declare const REFERENCE_FAMILIES: readonly ["cache-keys-v1", "tagged-values-v1", "identifiers-v1", "expressions-v1", "query-schemas-v1", "query-implementations-v1", "query-events-v1", "query-diagnostics-v1", "deployments-v1", "deployment-bundles-v1", "deployment-releases-v1"];
+export declare const REFERENCE_FAMILIES: readonly ["cache-keys-v1", "tagged-values-v1", "identifiers-v1", "expressions-v1", "query-schemas-v1", "query-implementations-v1", "query-events-v1", "query-diagnostics-v1", "deployments-v1", "deployment-bundles-v1", "deployment-releases-v1", "semantic-invocations-v1"];
 export declare function referenceHandle(family: string, role: FixtureRole, c: Case, section?: string): HandlerResult;
 export {};
 //# sourceMappingURL=reference.d.ts.map

package/dist/adapters/reference.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../../src/adapters/reference.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAc9D,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA0BpC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;CAWjC,CAAC;AAEX,eAAO,MAAM,kBAAkB,oPAYrB,CAAC;AAEX,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,CAAC,EAAE,IAAI,EACP,OAAO,CAAC,EAAE,MAAM,GACf,aAAa,CAoCf"}
+{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../../src/adapters/reference.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAe9D,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA0BpC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;CAWjC,CAAC;AAEX,eAAO,MAAM,kBAAkB,+QAarB,CAAC;AAEX,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,CAAC,EAAE,IAAI,EACP,OAAO,CAAC,EAAE,MAAM,GACf,aAAa,CAsCf"}

package/dist/adapters/reference.js

@@ -2,8 +2,8 @@
 // root export of @hypequery/protocol and returns a wire result. Every operation
 // goes through the package's supported surface — this is exactly what a second
 // implementation must reproduce.
-import { decodeCanonicalValue, deriveProtocolCacheKey, deriveProtocolCacheNamespaceToken, encodeCanonicalValue, hashCanonicalValue, parseProtocolIdentifier, parseProtocolQualifiedIdentifier, prepareProtocolDeploymentBundleManifest, prepareProtocolDeploymentContract, prepareProtocolDeploymentReleaseEnvelope, splitProtocolQualifiedIdentifier, validateCanonicalValue, validateProtocolDeploymentBundleManifest, validateProtocolDeploymentContract, validateProtocolDeploymentReleaseEnvelope, validateProtocolExpression, validateProtocolQueryDiagnostics, validateProtocolQueryEvent, validateProtocolQueryImplementation, validateProtocolSchema, validateProtocolSemanticQuery, validateProtocolSqlExpression, } from '@hypequery/protocol';
-import { materializeBundle, materializeDeployment, materializeDiagnostics, materializeEvent, materializeExpression, materializeIdentifier, materializeImplementation, materializeRelease, materializeSchema, materializeTaggedValue, } from './generators.js';
+import { decodeCanonicalValue, deriveProtocolCacheKey, deriveProtocolCacheNamespaceToken, encodeCanonicalValue, hashCanonicalValue, parseProtocolIdentifier, parseProtocolQualifiedIdentifier, prepareProtocolDeploymentBundleManifest, prepareProtocolDeploymentContract, prepareProtocolDeploymentReleaseEnvelope, splitProtocolQualifiedIdentifier, validateCanonicalValue, validateProtocolDeploymentBundleManifest, validateProtocolDeploymentContract, validateProtocolDeploymentReleaseEnvelope, validateProtocolExpression, validateProtocolQueryDiagnostics, validateProtocolQueryEvent, validateProtocolQueryImplementation, validateProtocolSchema, validateProtocolSemanticInvocation, validateProtocolSemanticInvocationFailure, validateProtocolSemanticInvocationResult, validateProtocolSemanticQuery, validateProtocolSqlExpression, } from '@hypequery/protocol';
+import { materializeBundle, materializeDeployment, materializeDiagnostics, materializeEvent, materializeSemanticInvocation, materializeExpression, materializeIdentifier, materializeImplementation, materializeRelease, materializeSchema, materializeTaggedValue, } from './generators.js';
 const STABLE_CODE = /^HQ_[A-Z0-9_]+$/;
 /** Turns a thrown protocol error into a wire rejection; rethrows anything else. */
 function mapError(error) {
@@ -54,6 +54,7 @@ export const REFERENCE_FAMILIES = [
     'deployments-v1',
     'deployment-bundles-v1',
     'deployment-releases-v1',
+    'semantic-invocations-v1',
 ];
 export function referenceHandle(family, role, c, section) {
     switch (family) {
@@ -86,12 +87,34 @@ export function referenceHandle(family, role, c, section) {
             return handleBundle(role, c);
         case 'deployment-releases-v1':
             return handleRelease(role, c);
+        case 'semantic-invocations-v1':
+            return handleSemanticInvocation(c);
         case 'cache-keys-v1':
             return handleCacheKey(role, c);
         default:
             throw new Error(`reference adapter does not support family ${family}`);
     }
 }
+/**
+ * One family covers the invocation, result, and failure records, so each case
+ * names which one it validates against.
+ */
+function handleSemanticInvocation(c) {
+    const validators = {
+        invocation: validateProtocolSemanticInvocation,
+        result: validateProtocolSemanticInvocationResult,
+        failure: validateProtocolSemanticInvocationFailure,
+    };
+    const record = c.record;
+    const validate = record === undefined ? undefined : validators[record];
+    if (!validate) {
+        throw new Error(`semantic invocation case is missing a known record: ${String(c.record)}`);
+    }
+    return attempt(() => {
+        validate(validationInput(c, materializeSemanticInvocation));
+        return ACCEPT;
+    });
+}
 function hexToBytes(hex) {
     const out = new Uint8Array(hex.length / 2);
     for (let index = 0; index < out.length; index += 1) {
@@ -167,7 +190,7 @@ function handleExpression(role, c, section) {
     const validate = isQuery ? validateProtocolSemanticQuery : validateProtocolExpression;
     if (role === 'success') {
         return attempt(() => {
-            validate(c.value);
+            validate(validationInput(c, materializeExpression));
             return ACCEPT;
         });
     }

package/fixtures/deployments-v1/README.md

@@ -7,3 +7,5 @@ These fixtures exercise RFC 0006 deployment envelopes containing datasets, named
 - `identity.json` pins canonical bytes and deployment identities.
 
 Coverage includes closed fields, versions, identifiers, relationship queryability, missing runtime artifacts, ambiguous routes, collection limits, source limits, and unsafe accessors.
+
+Semantic metadata (`examples`, `synonyms`, `format`, `unit`, `currency`, `timezone`, `sensitivity`) plus dataset `description`, `owner`, `freshness`, and `defaults` are covered by the `dataset-with-semantic-metadata` success case and by rejections for an unsupported sensitivity, a non-ISO currency, empty defaults, a default dimension that is not groupable, a default grain without a time field, and a synonym list above the 100-item semantic-metadata ceiling.

package/fixtures/deployments-v1/identity.json

@@ -3,5 +3,10 @@
     "id": "dataset-and-runtime-query",
     "canonical": "{\"artifacts\":[{\"artifactSha256\":\"0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\",\"runtime\":\"node\"}],\"datasets\":[{\"dimensions\":[{\"filterable\":true,\"groupable\":true,\"name\":\"status\",\"source\":{\"column\":\"status\",\"kind\":\"column\"},\"type\":\"string\"}],\"endpoint\":{\"access\":{\"kind\":\"authenticated\",\"roles\":[],\"scopes\":[\"read:orders\"]},\"maxLimit\":1000,\"path\":\"/api/analytics/datasets/orders/query\",\"tenant\":{\"column\":\"tenant_id\",\"kind\":\"required\",\"mode\":\"auto-inject\"}},\"filters\":[{\"field\":\"status\",\"name\":\"status\",\"operators\":[\"eq\",\"neq\"]}],\"limits\":{\"maxResultSize\":1000},\"measures\":[{\"aggregation\":\"sum\",\"field\":\"amount\",\"filters\":[],\"name\":\"revenue\"}],\"metrics\":[],\"name\":\"orders\",\"relationships\":[],\"source\":\"analytics.orders\",\"tenant\":{\"field\":\"tenant_id\",\"kind\":\"required\"},\"timeField\":\"created_at\"}],\"kind\":\"hypequery-deployment\",\"queries\":[{\"endpoint\":{\"access\":{\"kind\":\"public\"},\"method\":\"GET\",\"path\":\"/api/analytics/queries/health\",\"tenant\":{\"kind\":\"not-required\"}},\"implementation\":{\"artifactSha256\":\"0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef\",\"entrypoint\":\"queries.health\",\"kind\":\"runtime-reference\",\"runtime\":\"node\"},\"input\":{\"kind\":\"any\"},\"name\":\"health\",\"output\":{\"kind\":\"object\",\"properties\":{\"ok\":{\"kind\":\"boolean\"}},\"required\":[\"ok\"],\"unknownProperties\":\"strip\"},\"tags\":[\"system\"]}],\"version\":1}",
     "sha256": "1ec521ddeb1bf29205a2c0e2876b24b0eab49c0002825bc569071fbf6ad23e2d"
+  },
+  {
+    "id": "dataset-with-semantic-metadata",
+    "canonical": "{\"artifacts\":[],\"datasets\":[{\"defaults\":{\"dimensions\":[\"status\"],\"timeGrain\":\"day\"},\"description\":\"Completed customer orders.\",\"dimensions\":[{\"examples\":[\"paid\",\"refunded\"],\"filterable\":true,\"groupable\":true,\"name\":\"status\",\"sensitivity\":\"public\",\"source\":{\"column\":\"status\",\"kind\":\"column\"},\"synonyms\":[\"state\"],\"type\":\"string\"}],\"filters\":[{\"examples\":[\"paid\"],\"field\":\"status\",\"name\":\"status\",\"operators\":[\"eq\",\"neq\"]}],\"freshness\":{\"maxAgeSeconds\":3600},\"measures\":[{\"aggregation\":\"sum\",\"currency\":\"USD\",\"field\":\"amount\",\"filters\":[],\"format\":\"0,0.00\",\"name\":\"revenue\",\"sensitivity\":\"confidential\",\"unit\":\"currency\"}],\"metrics\":[],\"name\":\"orders\",\"owner\":\"revenue-team\",\"relationships\":[],\"sensitivity\":\"internal\",\"source\":\"analytics.orders\",\"synonyms\":[\"purchases\",\"sales\"],\"tenant\":{\"field\":\"tenant_id\",\"kind\":\"required\"},\"timeField\":\"created_at\",\"timezone\":\"UTC\"}],\"kind\":\"hypequery-deployment\",\"queries\":[],\"version\":1}",
+    "sha256": "c5c349d90561634fa773753d0bccddfb8af60925f09bb0c9310af8fae3762ca9"
   }
 ]

package/fixtures/deployments-v1/rejections.json

@@ -6,7 +6,13 @@
   { "id": "invalid-relationship-queryability", "generator": { "type": "invalid-relationship-queryability" }, "error": "HQ_DEPLOYMENT_INVALID_VALUE" },
   { "id": "missing-runtime-artifact", "generator": { "type": "missing-runtime-artifact" }, "error": "HQ_DEPLOYMENT_INVALID_REFERENCE" },
   { "id": "ambiguous-query-route", "generator": { "type": "ambiguous-query-route" }, "error": "HQ_DEPLOYMENT_INVALID_VALUE" },
+  { "id": "invalid-sensitivity", "generator": { "type": "invalid-sensitivity" }, "error": "HQ_DEPLOYMENT_INVALID_VALUE" },
+  { "id": "invalid-currency", "generator": { "type": "invalid-currency" }, "error": "HQ_DEPLOYMENT_INVALID_VALUE" },
+  { "id": "empty-defaults", "generator": { "type": "empty-defaults" }, "error": "HQ_DEPLOYMENT_INVALID_VALUE" },
+  { "id": "default-dimension-not-groupable", "generator": { "type": "default-dimension-not-groupable" }, "error": "HQ_DEPLOYMENT_INVALID_REFERENCE" },
+  { "id": "default-grain-without-time-field", "generator": { "type": "default-grain-without-time-field" }, "error": "HQ_DEPLOYMENT_INVALID_REFERENCE" },
   { "id": "too-many-datasets", "generator": { "type": "too-many-datasets" }, "error": "HQ_DEPLOYMENT_TOO_MANY_ITEMS" },
+  { "id": "too-many-synonyms", "generator": { "type": "too-many-synonyms" }, "error": "HQ_DEPLOYMENT_TOO_MANY_ITEMS" },
   { "id": "source-too-large", "generator": { "type": "source-too-large" }, "error": "HQ_DEPLOYMENT_TOO_LARGE" },
   { "id": "unsafe-accessor", "generator": { "type": "unsafe-accessor" }, "error": "HQ_DEPLOYMENT_UNSAFE_OBJECT" }
 ]

package/fixtures/deployments-v1/success.json

@@ -77,5 +77,63 @@
         }
       ]
     }
+  },
+  {
+    "id": "dataset-with-semantic-metadata",
+    "value": {
+      "kind": "hypequery-deployment",
+      "version": 1,
+      "datasets": [
+        {
+          "name": "orders",
+          "description": "Completed customer orders.",
+          "source": "analytics.orders",
+          "owner": "revenue-team",
+          "freshness": { "maxAgeSeconds": 3600 },
+          "defaults": { "dimensions": ["status"], "timeGrain": "day" },
+          "synonyms": ["purchases", "sales"],
+          "timezone": "UTC",
+          "sensitivity": "internal",
+          "tenant": { "kind": "required", "field": "tenant_id" },
+          "timeField": "created_at",
+          "dimensions": [
+            {
+              "name": "status",
+              "type": "string",
+              "source": { "kind": "column", "column": "status" },
+              "filterable": true,
+              "groupable": true,
+              "examples": ["paid", "refunded"],
+              "synonyms": ["state"],
+              "sensitivity": "public"
+            }
+          ],
+          "measures": [
+            {
+              "name": "revenue",
+              "aggregation": "sum",
+              "field": "amount",
+              "filters": [],
+              "format": "0,0.00",
+              "unit": "currency",
+              "currency": "USD",
+              "sensitivity": "confidential"
+            }
+          ],
+          "filters": [
+            {
+              "name": "status",
+              "field": "status",
+              "operators": ["eq", "neq"],
+              "examples": ["paid"]
+            }
+          ],
+          "metrics": [],
+          "relationships": []
+        }
+      ],
+      "queries": [],
+      "artifacts": []
+    }
   }
 ]

package/fixtures/expressions-v1/README.md

@@ -1,7 +1,14 @@
 # Portable expression v1 fixtures
 
-This family accompanies RFC 0003 and covers the closed semantic expression registry plus metric and dataset query envelopes.
+This family accompanies accepted RFC 0003 and covers the closed semantic expression registry plus metric and dataset query envelopes.
 
-`success.json` exercises accepted expressions and queries. `rejections.json` pins every stable failure code, including generated depth, width, node-count, and unsafe-accessor cases.
+`success.json` exercises accepted expressions and queries. `rejections.json` pins every stable failure code, including generated depth, width, node-count, and unsafe-accessor cases. Together they pin the exact protocol boundaries: depth 16/17, 1,000/1,001 nodes, and 100/101 collection items.
 
-Each rejection selects the `expression` or `query` validation surface and contains exactly one literal value or deterministic generator.
+Each case contains exactly one literal `value` or deterministic `generator`. Each rejection also selects the `expression` or `query` validation surface.
+
+Generators have these language-neutral meanings:
+
+- `nested-not` wraps the literal expression `{ "kind": "literal", "value": false }` in exactly `depth` logical `not` nodes.
+- `logical-operands` creates one logical `and` node containing `count` distinct copies of that literal expression.
+- `logical-tree` creates a logical `and` root with ten logical `and` groups. The first nine groups contain 100 distinct literal expressions and the tenth contains `lastGroupItems`. The resulting expression has exactly `911 + lastGroupItems` nodes.
+- `unsafe-accessor` is host-model conditional under RFC 0012 and exposes a reference's `name` through an accessor rather than a data property.

package/fixtures/expressions-v1/rejections.json

@@ -9,9 +9,18 @@
   { "id": "comparison-empty-in-list", "mode": "expression", "value": { "kind": "comparison", "operator": "in", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": { "$hypequery": { "type": "array", "version": 1, "values": [] } } } }, "error": "HQ_EXPRESSION_INVALID_ARITY" },
   { "id": "comparison-like-non-string", "mode": "expression", "value": { "kind": "comparison", "operator": "like", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": 1.5 } }, "error": "HQ_EXPRESSION_INVALID_VALUE" },
   { "id": "expression-invalid-aggregation", "mode": "expression", "value": { "kind": "aggregate", "aggregation": "percentile", "field": "amount", "level": 2.0 }, "error": "HQ_EXPRESSION_INVALID_AGGREGATION" },
+  { "id": "aggregate-arg-with-filters", "mode": "expression", "value": { "kind": "aggregate", "aggregation": "argMax", "field": "status", "argField": "created_at", "filters": [] }, "error": "HQ_EXPRESSION_INVALID_AGGREGATION" },
+  { "id": "aggregate-non-arg-with-arg-field", "mode": "expression", "value": { "kind": "aggregate", "aggregation": "sum", "field": "amount", "argField": "created_at" }, "error": "HQ_EXPRESSION_INVALID_AGGREGATION" },
+  { "id": "aggregate-percentile-missing-level", "mode": "expression", "value": { "kind": "aggregate", "aggregation": "percentile", "field": "amount" }, "error": "HQ_EXPRESSION_INVALID_AGGREGATION" },
+  { "id": "aggregate-filter-not-predicate", "mode": "expression", "value": { "kind": "aggregate", "aggregation": "sum", "field": "amount", "filters": [{ "kind": "literal", "value": true }] }, "error": "HQ_EXPRESSION_INVALID_AGGREGATION" },
   { "id": "query-invalid-grain", "mode": "query", "value": { "kind": "dataset", "dataset": "orders", "by": "hour" }, "error": "HQ_EXPRESSION_INVALID_QUERY" },
-  { "id": "expression-too-deep", "mode": "expression", "generator": { "type": "nested-not", "depth": 17 }, "error": "HQ_EXPRESSION_TOO_DEEP" },
-  { "id": "expression-too-many-nodes", "mode": "expression", "generator": { "type": "logical-tree" }, "error": "HQ_EXPRESSION_TOO_MANY_NODES" },
+  { "id": "query-filter-not-predicate", "mode": "query", "value": { "kind": "dataset", "dataset": "orders", "filters": [{ "kind": "literal", "value": true }] }, "error": "HQ_EXPRESSION_INVALID_QUERY" },
+  { "id": "metric-query-measures-unknown", "mode": "query", "value": { "kind": "metric", "dataset": "orders", "metric": "revenue", "measures": [] }, "error": "HQ_EXPRESSION_UNKNOWN_FIELD" },
+  { "id": "query-limit-unsafe-integer", "mode": "query", "value": { "kind": "dataset", "dataset": "orders", "limit": 9007199254740992 }, "error": "HQ_EXPRESSION_INVALID_QUERY" },
+  { "id": "query-offset-negative", "mode": "query", "value": { "kind": "dataset", "dataset": "orders", "offset": -1 }, "error": "HQ_EXPRESSION_INVALID_QUERY" },
+  { "id": "query-order-direction-invalid", "mode": "query", "value": { "kind": "dataset", "dataset": "orders", "orderBy": [{ "field": "revenue", "direction": "ascending" }] }, "error": "HQ_EXPRESSION_INVALID_QUERY" },
+  { "id": "expression-too-deep", "mode": "expression", "generator": { "type": "nested-not", "depth": 16 }, "error": "HQ_EXPRESSION_TOO_DEEP" },
+  { "id": "expression-too-many-nodes", "mode": "expression", "generator": { "type": "logical-tree", "lastGroupItems": 90 }, "error": "HQ_EXPRESSION_TOO_MANY_NODES" },
   { "id": "expression-too-many-items", "mode": "expression", "generator": { "type": "logical-operands", "count": 101 }, "error": "HQ_EXPRESSION_TOO_MANY_ITEMS" },
   { "id": "expression-unsafe-accessor", "mode": "expression", "generator": { "type": "unsafe-accessor" }, "error": "HQ_EXPRESSION_UNSAFE_OBJECT" }
 ]

package/fixtures/expressions-v1/success.json

@@ -8,6 +8,7 @@
     { "id": "binary-divide", "value": { "kind": "binary", "operator": "divide", "left": { "kind": "reference", "name": "revenue" }, "right": { "kind": "literal", "value": 1.5 } } },
     { "id": "call-nullIfZero", "value": { "kind": "call", "function": "nullIfZero", "args": [{ "kind": "reference", "name": "orders" }] } },
     { "id": "call-coalesce", "value": { "kind": "call", "function": "coalesce", "args": [{ "kind": "reference", "name": "revenue" }, { "kind": "literal", "value": 0.5 }] } },
+    { "id": "call-round-one-argument", "value": { "kind": "call", "function": "round", "args": [{ "kind": "reference", "name": "revenue" }] } },
     { "id": "call-round", "value": { "kind": "call", "function": "round", "args": [{ "kind": "reference", "name": "revenue" }, { "kind": "literal", "value": 2.0 }] } },
     { "id": "call-floor", "value": { "kind": "call", "function": "floor", "args": [{ "kind": "reference", "name": "revenue" }] } },
     { "id": "call-ceil", "value": { "kind": "call", "function": "ceil", "args": [{ "kind": "reference", "name": "revenue" }] } },
@@ -25,6 +26,7 @@
     { "id": "logical-or", "value": { "kind": "logical", "operator": "or", "operands": [{ "kind": "literal", "value": true }, { "kind": "literal", "value": false }] } },
     { "id": "logical-not", "value": { "kind": "logical", "operator": "not", "operand": { "kind": "literal", "value": false } } },
     { "id": "aggregate-sum-filtered", "value": { "kind": "aggregate", "aggregation": "sum", "field": "amount", "filters": [{ "kind": "comparison", "operator": "eq", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": "paid" } }] } },
+    { "id": "aggregate-sum-empty-filters", "value": { "kind": "aggregate", "aggregation": "sum", "field": "amount", "filters": [] } },
     { "id": "aggregate-count", "value": { "kind": "aggregate", "aggregation": "count", "field": "id" } },
     { "id": "aggregate-countDistinct", "value": { "kind": "aggregate", "aggregation": "countDistinct", "field": "customer_id" } },
     { "id": "aggregate-avg", "value": { "kind": "aggregate", "aggregation": "avg", "field": "amount" } },
@@ -35,11 +37,15 @@
     { "id": "aggregate-percentile", "value": { "kind": "aggregate", "aggregation": "percentile", "field": "amount", "level": 0.95 } },
     { "id": "aggregate-median-normalized", "value": { "kind": "aggregate", "aggregation": "percentile", "field": "amount", "level": 0.5 } },
     { "id": "aggregate-stddev", "value": { "kind": "aggregate", "aggregation": "stddev", "field": "amount" } },
-    { "id": "aggregate-variance", "value": { "kind": "aggregate", "aggregation": "variance", "field": "amount" } }
+    { "id": "aggregate-variance", "value": { "kind": "aggregate", "aggregation": "variance", "field": "amount" } },
+    { "id": "limit-depth-16", "generator": { "type": "nested-not", "depth": 15 } },
+    { "id": "limit-nodes-1000", "generator": { "type": "logical-tree", "lastGroupItems": 89 } },
+    { "id": "limit-items-100", "generator": { "type": "logical-operands", "count": 100 } }
   ],
   "queries": [
     { "id": "dataset-all-query-features", "value": { "kind": "dataset", "dataset": "orders", "dimensions": ["status", "customer.country"], "measures": ["revenue", "orders"], "filters": [{ "kind": "comparison", "operator": "eq", "left": { "kind": "reference", "name": "status" }, "right": { "kind": "literal", "value": "paid" } }], "orderBy": [{ "field": "customer.country", "direction": "asc" }, { "field": "revenue", "direction": "desc" }], "limit": 100, "offset": 0, "by": "quarter", "includeMeta": true } },
     { "id": "metric-all-query-features", "value": { "kind": "metric", "dataset": "orders", "metric": "average_order_value", "dimensions": ["customer.country"], "filters": [], "orderBy": [{ "field": "period", "direction": "asc" }], "limit": 25, "offset": 50, "by": "week", "includeMeta": false } },
+    { "id": "query-safe-integer-maximum", "value": { "kind": "dataset", "dataset": "orders", "limit": 9007199254740991, "offset": 9007199254740991 } },
     { "id": "grain-day", "value": { "kind": "dataset", "dataset": "orders", "by": "day" } },
     { "id": "grain-month", "value": { "kind": "dataset", "dataset": "orders", "by": "month" } },
     { "id": "grain-year", "value": { "kind": "dataset", "dataset": "orders", "by": "year", "limit": 0 } }

package/fixtures/manifest.json

@@ -221,6 +221,23 @@
           "role": "rejection"
         }
       ]
+    },
+    {
+      "name": "semantic-invocations-v1",
+      "rfc": "0014",
+      "codePrefixes": [
+        "HQ_INVOCATION_"
+      ],
+      "files": [
+        {
+          "path": "semantic-invocations-v1/success.json",
+          "role": "success"
+        },
+        {
+          "path": "semantic-invocations-v1/rejections.json",
+          "role": "rejection"
+        }
+      ]
     }
   ],
   "fuzz": [

package/fixtures/semantic-invocations-v1/README.md

@@ -0,0 +1,10 @@
+# Semantic invocation v1 fixtures
+
+These fixtures exercise RFC 0014 semantic invocation records: the dataset/metric invocation request, the successful result, and the closed failure record.
+
+- `success.json` contains accepted language-neutral records, each tagged with the `record` it validates against.
+- `rejections.json` pins generated invalid inputs and stable error codes.
+
+Coverage includes closed fields, versions, the normalized single identifier location, activation-revision format, budget floors and ceilings, an empty budget, row and column limits, non-finite and non-scalar cells, a `rowCount` that disagrees with `data`, failure categories, provider-shaped failure codes, control characters, and unsafe accessors.
+
+Every record carries a `record` discriminator (`invocation`, `result`, or `failure`) so one family covers all three without three near-identical fixture sets.

package/fixtures/semantic-invocations-v1/rejections.json

@@ -0,0 +1,29 @@
+[
+  {"id": "wrong-root-type", "record": "invocation", "generator": {"type": "wrong-root-type"}, "error": "HQ_INVOCATION_TYPE"},
+  {"id": "unknown-root-field", "record": "invocation", "generator": {"type": "unknown-root-field"}, "error": "HQ_INVOCATION_UNKNOWN_FIELD"},
+  {"id": "unsupported-version", "record": "invocation", "generator": {"type": "unsupported-version"}, "error": "HQ_INVOCATION_INVALID_VERSION"},
+  {"id": "caller-supplied-tenant", "record": "invocation", "generator": {"type": "caller-supplied-tenant"}, "error": "HQ_INVOCATION_UNKNOWN_FIELD"},
+  {"id": "redundant-operation-dataset", "record": "invocation", "generator": {"type": "redundant-operation-dataset"}, "error": "HQ_INVOCATION_UNKNOWN_FIELD"},
+  {"id": "malformed-activation-revision", "record": "invocation", "generator": {"type": "malformed-activation-revision"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "empty-budget", "record": "invocation", "generator": {"type": "empty-budget"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "zero-deadline", "record": "invocation", "generator": {"type": "zero-deadline"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "deadline-too-large", "record": "invocation", "generator": {"type": "deadline-too-large"}, "error": "HQ_INVOCATION_TOO_LARGE"},
+  {"id": "correlation-id-control-character", "record": "invocation", "generator": {"type": "correlation-id-control-character"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "unsafe-accessor", "record": "invocation", "generator": {"type": "unsafe-accessor"}, "error": "HQ_INVOCATION_UNSAFE_OBJECT"},
+  {"id": "too-many-rows", "record": "result", "generator": {"type": "too-many-rows"}, "error": "HQ_INVOCATION_TOO_MANY_ITEMS"},
+  {"id": "too-many-columns", "record": "result", "generator": {"type": "too-many-columns"}, "error": "HQ_INVOCATION_TOO_MANY_ITEMS"},
+  {"id": "non-finite-cell", "record": "result", "generator": {"type": "non-finite-cell"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "nested-cell", "record": "result", "generator": {"type": "nested-cell"}, "error": "HQ_INVOCATION_TYPE"},
+  {"id": "cell-too-large", "record": "result", "generator": {"type": "cell-too-large"}, "error": "HQ_INVOCATION_TOO_LARGE"},
+  {"id": "row-count-mismatch", "record": "result", "generator": {"type": "row-count-mismatch"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "sparse-data-array", "record": "result", "generator": {"type": "sparse-data-array"}, "error": "HQ_INVOCATION_UNSAFE_OBJECT"},
+  {"id": "unknown-failure-category", "record": "failure", "generator": {"type": "unknown-failure-category"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "provider-shaped-failure-code", "record": "failure", "generator": {"type": "provider-shaped-failure-code"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "failure-message-too-large", "record": "failure", "generator": {"type": "failure-message-too-large"}, "error": "HQ_INVOCATION_TOO_LARGE"},
+  {"id": "cell-control-character", "record": "result", "generator": {"type": "cell-control-character"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "provider-shaped-failure-message", "record": "failure", "generator": {"type": "provider-shaped-failure-message"}, "error": "HQ_INVOCATION_INVALID_VALUE"},
+  {"id": "custom-prototype-data-array", "record": "result", "generator": {"type": "custom-prototype-data-array"}, "error": "HQ_INVOCATION_UNSAFE_OBJECT"},
+  {"id": "accessor-data-array", "record": "result", "generator": {"type": "accessor-data-array"}, "error": "HQ_INVOCATION_UNSAFE_OBJECT"},
+  {"id": "hidden-data-array-property", "record": "result", "generator": {"type": "hidden-data-array-property"}, "error": "HQ_INVOCATION_UNSAFE_OBJECT"},
+  {"id": "symbol-data-array-property", "record": "result", "generator": {"type": "symbol-data-array-property"}, "error": "HQ_INVOCATION_UNSAFE_OBJECT"}
+]

package/fixtures/semantic-invocations-v1/success.json

@@ -0,0 +1,102 @@
+[
+  {
+    "id": "minimal-dataset-invocation",
+    "record": "invocation",
+    "value": {
+      "kind": "hypequery-semantic-invocation",
+      "version": 1,
+      "target": { "project": "acme", "environment": "production" },
+      "operation": { "kind": "dataset", "dataset": "orders", "measures": ["revenue"] }
+    }
+  },
+  {
+    "id": "pinned-metric-invocation-with-budget",
+    "record": "invocation",
+    "value": {
+      "kind": "hypequery-semantic-invocation",
+      "version": 1,
+      "target": { "project": "acme", "environment": "production" },
+      "activationRevision": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "operation": {
+        "kind": "metric",
+        "dataset": "orders",
+        "metric": "total_revenue",
+        "dimensions": ["status"],
+        "by": "day",
+        "limit": 100,
+        "offset": 0
+      },
+      "budget": { "deadlineMs": 30000, "maxRows": 1000, "maxResponseBytes": 1048576 },
+      "correlationId": "req-7f3a"
+    }
+  },
+  {
+    "id": "empty-result",
+    "record": "result",
+    "value": {
+      "kind": "hypequery-semantic-invocation-result",
+      "version": 1,
+      "activationRevision": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "data": [],
+      "meta": { "rowCount": 0 }
+    }
+  },
+  {
+    "id": "paginated-result",
+    "record": "result",
+    "value": {
+      "kind": "hypequery-semantic-invocation-result",
+      "version": 1,
+      "activationRevision": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "data": [
+        { "status": "paid", "revenue": 1234.5, "refunded": false, "note": null },
+        { "status": "pending", "revenue": 0, "refunded": true, "note": "partial" }
+      ],
+      "meta": {
+        "rowCount": 2,
+        "pagination": { "limit": 2, "offset": 0, "hasMore": true }
+      }
+    }
+  },
+  {
+    "id": "correctable-failure",
+    "record": "failure",
+    "value": {
+      "kind": "hypequery-semantic-invocation-failure",
+      "version": 1,
+      "category": "input-invalid",
+      "code": "HQ_SEMANTIC_UNKNOWN_DIMENSION",
+      "message": "The semantic query is invalid.",
+      "path": "$.operation.dimensions[0]",
+      "retryable": false,
+      "relist": false
+    }
+  },
+  {
+    "id": "stale-activation-failure",
+    "record": "failure",
+    "value": {
+      "kind": "hypequery-semantic-invocation-failure",
+      "version": 1,
+      "category": "stale-activation",
+      "code": "HQ_SEMANTIC_STALE_ACTIVATION",
+      "message": "The pinned activation is no longer active.",
+      "retryable": true,
+      "relist": true,
+      "activationRevision": "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
+    }
+  },
+  {
+    "id": "unsupported-capability-failure",
+    "record": "failure",
+    "value": {
+      "kind": "hypequery-semantic-invocation-failure",
+      "version": 1,
+      "category": "unsupported-capability",
+      "code": "HQ_SEMANTIC_DERIVED_METRIC_UNSUPPORTED",
+      "message": "Portable execution cannot reproduce this target.",
+      "retryable": false,
+      "relist": false
+    }
+  }
+]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/protocol-conformance",
-  "version": "0.10.4",
+  "version": "0.11.0",
   "description": "Cross-language conformance runner for the Hypequery analytics security protocol",
   "keywords": [
     "hypequery",
@@ -31,7 +31,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@hypequery/protocol": "^0.11.0"
+    "@hypequery/protocol": "^0.12.0"
   },
   "devDependencies": {
     "@types/node": "^22.5.0",