@hypequery/protocol-conformance 0.9.1 → 0.10.0

package/fixtures/cache-keys-v1/rejections.json

@@ -0,0 +1,172 @@
+[
+  {
+    "id": "secret-missing",
+    "secretHex": "",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_SECRET_MISSING"
+  },
+  {
+    "id": "secret-31-bytes",
+    "secretHex": "11111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_SECRET_TOO_SHORT"
+  },
+  {
+    "id": "project-with-space",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "has space",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_INVALID_NAMESPACE"
+  },
+  {
+    "id": "project-leading-underscore",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "_acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_INVALID_NAMESPACE"
+  },
+  {
+    "id": "environment-leading-underscore",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "__hypequery_env"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_INVALID_NAMESPACE"
+  },
+  {
+    "id": "environment-empty",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": ""
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_INVALID_NAMESPACE"
+  },
+  {
+    "id": "key-version-zero",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 0,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_INVALID_VERSION"
+  },
+  {
+    "id": "key-version-negative",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": -1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_INVALID_VERSION"
+  },
+  {
+    "id": "key-version-fractional",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1.5,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_INVALID_VERSION"
+  },
+  {
+    "id": "key-version-above-max",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 2147483648,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "error": "HQ_CACHE_KEY_INVALID_VERSION"
+  },
+  {
+    "id": "preimage-too-large",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "generator": {
+      "type": "repeat-string",
+      "utf8": "a",
+      "count": 1048577
+    },
+    "error": "HQ_CACHE_KEY_PREIMAGE_TOO_LARGE"
+  },
+  {
+    "id": "precedence-secret-before-namespace",
+    "secretHex": "",
+    "namespace": {
+      "project": "has space",
+      "environment": ""
+    },
+    "keyVersion": 0,
+    "generator": {
+      "type": "repeat-string",
+      "utf8": "a",
+      "count": 1048577
+    },
+    "error": "HQ_CACHE_KEY_SECRET_MISSING"
+  },
+  {
+    "id": "precedence-namespace-before-version",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "has space",
+      "environment": "production"
+    },
+    "keyVersion": 0,
+    "generator": {
+      "type": "repeat-string",
+      "utf8": "a",
+      "count": 1048577
+    },
+    "error": "HQ_CACHE_KEY_INVALID_NAMESPACE"
+  },
+  {
+    "id": "precedence-version-before-preimage",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 0,
+    "generator": {
+      "type": "repeat-string",
+      "utf8": "a",
+      "count": 1048577
+    },
+    "error": "HQ_CACHE_KEY_INVALID_VERSION"
+  }
+]

package/fixtures/cache-keys-v1/success.json

@@ -0,0 +1,134 @@
+[
+  {
+    "id": "basic",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "QZmJzTyhPUpRooLespx4XQ",
+    "key": "hq1.1.QZmJzTyhPUpRooLespx4XQ.uDrSq4MwQ-yttsrzdpCHbiGutMxHn2LM8sf2T0boN3k"
+  },
+  {
+    "id": "namespace-separates-environment",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "staging"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "Ze61MnuVhdrTfAaVhRQAlw",
+    "key": "hq1.1.Ze61MnuVhdrTfAaVhRQAlw.yOeRV5mUwtkZ2ElBExrNWtjpiO2VC7Ite2vLVtyua7U"
+  },
+  {
+    "id": "namespace-separates-project",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "globex",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "VOSW_B4ow0Tv5VwAzLza9Q",
+    "key": "hq1.1.VOSW_B4ow0Tv5VwAzLza9Q.m3d9igKuFNjuJKT1K15y4H5VqnkqZ3YiYIrtZbeOhqI"
+  },
+  {
+    "id": "rotation-changes-key",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 2,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "QZmJzTyhPUpRooLespx4XQ",
+    "key": "hq1.2.QZmJzTyhPUpRooLespx4XQ.uDrSq4MwQ-yttsrzdpCHbiGutMxHn2LM8sf2T0boN3k"
+  },
+  {
+    "id": "secret-separates-key",
+    "secretHex": "2222222222222222222222222222222222222222222222222222222222222222",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "IOwBfU4fGoFMYm-dzKMTxw",
+    "key": "hq1.1.IOwBfU4fGoFMYm-dzKMTxw.0bhDqv_vgmO_y7t6gSX64uIh4uWj8iZX5Z5HIthWTZc"
+  },
+  {
+    "id": "long-secret",
+    "secretHex": "33333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333333",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "ZIWp472wGrPSAa8KgOAQAg",
+    "key": "hq1.1.ZIWp472wGrPSAa8KgOAQAg.k3DrKZocGPEgjdpv4_Y7AYzDbFZGe-mZUxPyEakGHWM"
+  },
+  {
+    "id": "empty-preimage",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "",
+    "namespaceToken": "QZmJzTyhPUpRooLespx4XQ",
+    "key": "hq1.1.QZmJzTyhPUpRooLespx4XQ.JyTBb3tVj3hk39GNDkQdfzzacOFM7Mi28KI2JFF3x0U"
+  },
+  {
+    "id": "sensitive-preimage-not-recoverable",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"filters\":[{\"field\":\"email\",\"operator\":\"eq\",\"value\":\"ana@example.com\"}],\"tenant\":{\"value\":\"acme_corp\"}}",
+    "namespaceToken": "QZmJzTyhPUpRooLespx4XQ",
+    "key": "hq1.1.QZmJzTyhPUpRooLespx4XQ.GYbj4VYnkB6WuxsF1qI0k1PmLQiyiE1harFHqlUvREk"
+  },
+  {
+    "id": "max-key-version",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "acme",
+      "environment": "production"
+    },
+    "keyVersion": 2147483647,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "QZmJzTyhPUpRooLespx4XQ",
+    "key": "hq1.2147483647.QZmJzTyhPUpRooLespx4XQ.uDrSq4MwQ-yttsrzdpCHbiGutMxHn2LM8sf2T0boN3k"
+  },
+  {
+    "id": "deployment-target-punctuation",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "project-1",
+      "environment": "preview.eu:1"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "5K9R0USPhZZ80IwqwSQTpA",
+    "key": "hq1.1.5K9R0USPhZZ80IwqwSQTpA.IoVojW5ZVqSAIc1xOKExteLniKobmndoGRIQ1SulVu4"
+  },
+  {
+    "id": "deployment-target-leading-digit",
+    "secretHex": "1111111111111111111111111111111111111111111111111111111111111111",
+    "namespace": {
+      "project": "1acme",
+      "environment": "production"
+    },
+    "keyVersion": 1,
+    "preimageUtf8": "{\"kind\":\"dataset\",\"target\":\"orders\",\"v\":1}",
+    "namespaceToken": "nCVELIgkASbf5L3bU9HY1Q",
+    "key": "hq1.1.nCVELIgkASbf5L3bU9HY1Q.0QiWBc1mnpiVmKm8nvYnTXoppJ7SEHtJNQgW-70eDMo"
+  }
+]

package/fixtures/deployment-bundles-v1/README.md

@@ -1,61 +1,9 @@
 # Deployment bundle manifest v1 fixtures
 
-- `success.json` contains complete manifests accepted by the v1 validator.
-- `rejections.json` maps generated invalid inputs to stable failure codes.
-- `identity.json` fixes the RFC 8785 canonical bytes and domain-separated
-  SHA-256 identity for matching success fixture ids.
+These fixtures pin the closed bundle rules in RFC 0007.
 
-The fixtures exercise RFC 0007. Artifact byte verification is covered by the
-CLI reference verifier because these language-neutral fixtures describe the
-manifest rather than a filesystem.
+- `success.json` contains accepted manifests.
+- `rejections.json` describes invalid manifests and required failure codes.
+- `identity.json` pins canonical bytes and domain-separated SHA-256 identities.
 
-## Generated rejection semantics
-
-Every rejection is a deterministic transform of this pinned base manifest
-(RFC 0012), where `artifact(index)` denotes (with `<sha256>` the 64-digit
-lowercase hexadecimal form of `index`, zero-padded):
-
-```json
-{
-  "runtime": "node",
-  "path": "artifacts/<sha256>.mjs",
-  "sha256": "<sha256>",
-  "byteLength": 1
-}
-```
-
-and the base is:
-
-```json
-{
-  "kind": "hypequery-deployment-bundle",
-  "version": 1,
-  "deployment": {
-    "path": "deployment.json",
-    "identity": "1111111111111111111111111111111111111111111111111111111111111111",
-    "sha256": "2222222222222222222222222222222222222222222222222222222222222222",
-    "byteLength": 1
-  },
-  "artifacts": [artifact(0)]
-}
-```
-
-Generator types expand as follows:
-
-- `wrong-root-type`: an empty array instead of an object;
-- `unknown-root-field`: the base plus `"extra": true`;
-- `unsupported-version`: the base with `"version": 2`;
-- `malformed-digest`: the base with `deployment.identity` replaced by
-  `"bad"`;
-- `traversal-path`: the base with `deployment.path` replaced by
-  `"../deployment.json"`;
-- `duplicate-path`: the base with its only artifact's `path` replaced by
-  `"deployment.json"`, colliding with the deployment path;
-- `too-many-artifacts`: the base with 101 artifacts `artifact(0)` through
-  `artifact(100)`;
-- `deployment-too-large`: the base with `deployment.byteLength` replaced by
-  16777217 (16 MiB plus one byte);
-- `unsafe-accessor`: the base with `kind` served by an enumerable computed
-  accessor returning `"hypequery-deployment-bundle"` instead of a plain
-  data property. Host-model conditional (RFC 0012): implementations whose
-  input model cannot express computed accessors skip this case.
+Rejections cover root shape, unknown fields, versions, digests, traversal, duplicate paths, artifact and byte limits, and unsafe host-language accessors. Filesystem byte verification is tested by the deployment verifier because this family describes manifests, not directories.

package/fixtures/deployment-releases-v1/README.md

@@ -1,36 +1,9 @@
-# Deployment release envelope v1 fixtures
+# Deployment release v1 fixtures
 
-- `success.json` contains complete envelopes accepted by the v1 validator.
-- `rejections.json` maps generated invalid inputs to stable failure codes.
-- `identity.json` fixes the RFC 8785 canonical bytes and domain-separated
-  SHA-256 identity for matching success fixture ids.
+These fixtures pin RFC 0008 release envelopes, which bind one verified bundle identity to an explicit project and environment.
 
-These fixtures exercise RFC 0008. Bundle filesystem verification remains part
-of RFC 0007 and is intentionally not duplicated here.
+- `success.json` contains accepted envelopes.
+- `rejections.json` maps invalid or generated inputs to stable error codes.
+- `identity.json` pins canonical bytes and release identities.
 
-## Generated rejection semantics
-
-Every rejection is a deterministic transform of this pinned base envelope
-(RFC 0012):
-
-```json
-{
-  "kind": "hypequery-deployment-release",
-  "version": 1,
-  "bundleIdentity": "0000000000000000000000000000000000000000000000000000000000000000",
-  "target": { "project": "project_1", "environment": "production" }
-}
-```
-
-Generator types expand as follows:
-
-- `wrong-root-type`: an empty array instead of an object;
-- `unknown-root-field`: the base plus `"extra": true`;
-- `unsupported-version`: the base with `"version": 2`;
-- `malformed-bundle-identity`: the base with `"bundleIdentity": "bad"`;
-- `target-too-large`: the base with `target.project` replaced by `p`
-  followed by 128 repetitions of `a` (129 bytes);
-- `unsafe-accessor`: the base with `kind` served by an enumerable computed
-  accessor returning `"hypequery-deployment-release"` instead of a plain
-  data property. Host-model conditional (RFC 0012): implementations whose
-  input model cannot express computed accessors skip this case.
+The family covers closed fields, version handling, bundle digests, target limits, and unsafe accessors. Bundle filesystem verification remains in the bundle contract.

package/fixtures/deployments-v1/README.md

@@ -1,77 +1,9 @@
 # Deployment contract v1 fixtures
 
-- `success.json` contains complete contracts accepted by the v1 validator.
-- `rejections.json` maps generated invalid inputs to stable failure codes.
-- `identity.json` fixes the RFC 8785 canonical bytes and domain-separated
-  SHA-256 identity for matching success fixture ids.
+These fixtures exercise RFC 0006 deployment envelopes containing datasets, named queries, endpoint policy, and runtime artifact references.
 
-These fixtures exercise RFC 0006 deployment envelopes. `success.json`
-contains language-neutral accepted values. `rejections.json` identifies
-deterministic generated inputs and the stable error code every conforming
-implementation must return.
+- `success.json` contains accepted language-neutral deployments.
+- `rejections.json` pins generated invalid inputs and stable error codes.
+- `identity.json` pins canonical bytes and deployment identities.
 
-## Generated rejection semantics
-
-Every rejection is a deterministic transform of this pinned base deployment
-(RFC 0012), where `dataset(name)` denotes:
-
-```json
-{
-  "name": "<name>",
-  "source": "orders",
-  "tenant": { "kind": "not-required" },
-  "dimensions": [],
-  "measures": [],
-  "filters": [],
-  "metrics": [],
-  "relationships": []
-}
-```
-
-and the base is:
-
-```json
-{
-  "kind": "hypequery-deployment",
-  "version": 1,
-  "datasets": [dataset("orders")],
-  "queries": [],
-  "artifacts": []
-}
-```
-
-Generator types expand as follows:
-
-- `wrong-root-type`: an empty array instead of an object;
-- `unknown-root-field`: the base plus `"extra": true`;
-- `unsupported-version`: the base with `"version": 2`;
-- `invalid-dataset-identifier`: the base with its only dataset replaced by
-  `dataset("bad-name")` (hyphens are not valid identifier characters);
-- `invalid-relationship-queryability`: the base with its only dataset given
-  one relationship
-  `{ "name": "items", "kind": "hasMany", "target": "orders", "from": "id",
-  "to": "order_id", "queryable": true }` (a `hasMany` relationship must not
-  be queryable);
-- `missing-runtime-artifact`: the base plus one named query `health` with
-  input `{ "kind": "any" }`, output `{ "kind": "any" }`, implementation
-  `{ "kind": "runtime-reference", "runtime": "node", "artifactSha256":
-  <64 zeros>, "entrypoint": "queries.health" }`, endpoint
-  `{ "access": { "kind": "public" }, "tenant": { "kind": "not-required" },
-  "method": "GET", "path": "/health" }`, and `"tags": []` — while
-  `artifacts` stays empty, so the referenced artifact does not exist;
-- `ambiguous-query-route`: the base plus two named queries `first` and
-  `second`, each with input `{ "kind": "void" }`, output
-  `{ "kind": "void" }`, implementation `{ "kind": "semantic-plan",
-  "query": { "kind": "dataset", "dataset": "orders", "dimensions": [],
-  "measures": [], "filters": [], "orderBy": [] } }`, endpoint
-  `{ "access": { "kind": "public" }, "tenant": { "kind": "not-required" },
-  "method": "GET", "path": "/same" }`, and `"tags": []` — both share one
-  method and path;
-- `too-many-datasets`: the base with 101 datasets `dataset("dataset_0")`
-  through `dataset("dataset_100")`;
-- `source-too-large`: the base with its only dataset's `source` replaced by
-  1025 repetitions of `a`;
-- `unsafe-accessor`: the base with `kind` served by an enumerable computed
-  accessor returning `"hypequery-deployment"` instead of a plain data
-  property. Host-model conditional (RFC 0012): implementations whose input
-  model cannot express computed accessors skip this case.
+Coverage includes closed fields, versions, identifiers, relationship queryability, missing runtime artifacts, ambiguous routes, collection limits, source limits, and unsafe accessors.

package/fixtures/expressions-v1/README.md

@@ -1,25 +1,7 @@
-# Portable expression fixtures, version 1
+# Portable expression v1 fixtures
 
-These fixtures accompany RFC 0003. `success.json` exercises every closed
-operator registry and both semantic query envelopes. `rejections.json` covers
-every stable failure code; generator entries describe inputs that are awkward
-or unsafe to encode directly as JSON.
+This family accompanies RFC 0003 and covers the closed semantic expression registry plus metric and dataset query envelopes.
 
-## Generated rejection semantics
+`success.json` exercises accepted expressions and queries. `rejections.json` pins every stable failure code, including generated depth, width, node-count, and unsafe-accessor cases.
 
-Rejection entries carry exactly one of `value` or `generator`, a `mode`
-(`expression` or `query`) selecting the validated surface, and the required
-stable `error` code. Generator types expand as follows (RFC 0012), where
-`literal` denotes `{ "kind": "literal", "value": false }`:
-
-- `nested-not`: wraps `literal` in
-  `{ "kind": "logical", "operator": "not", "operand": ... }` `depth` times;
-- `logical-operands`: one
-  `{ "kind": "logical", "operator": "and", "operands": [...] }` node whose
-  operands are `count` copies of `literal`;
-- `logical-tree`: one `and` node whose operands are 10 `and` nodes, each
-  with 100 copies of `literal` as operands (1011 nodes total);
-- `unsafe-accessor`: `{ "kind": "reference" }` with `name` served by an
-  enumerable computed accessor returning `"orders"` instead of a plain data
-  property. Host-model conditional (RFC 0012): implementations whose input
-  model cannot express computed accessors skip this case.
+Each rejection selects the `expression` or `query` validation surface and contains exactly one literal value or deterministic generator.

package/fixtures/fuzz-seeds-v1/README.md

@@ -1,29 +1,9 @@
-# Fuzz seed corpus, version 1
+# Deterministic fuzz seed corpus v1
 
-Deterministic adversarial seeds replayed verbatim on every conformance run
-(RFC 0012). A mutating fuzzer is out of scope; this corpus is the foundation
-it would grow. Any input that later crashes an implementation must be
-minimized and added here as a seed.
+These adversarial inputs replay on every conformance run under RFC 0012. An implementation may accept a seed within documented limits or reject it with a stable `HQ_*` code; it must never crash, hang, partially execute input, or allocate without bounds.
 
-For every seed an implementation must, within the runner timeout, either
-accept the input or reject it with a stable code matching
-`^HQ_[A-Z0-9_]+$`. It must never crash, hang, or partially execute the
-input, and must enforce documented limits before unbounded allocation.
+- `value-sources.json` targets duplicate-aware JSON decoding and tagged values.
+- `structured-values.json` targets selected structural validator families.
+- `sql-expressions.json` targets the SQL portability compiler.
 
-## Files
-
-- `value-sources.json` targets the tagged-values-v1 decode and validation
-  path. Entries carry an `id` and exactly one of `sourceUtf8` (exact JSON
-  source for a duplicate-aware parser) or `generator` (expanded per the
-  tagged-values-v1 README).
-- `structured-values.json` targets structural validators. Entries carry an
-  `id`, a `value`, and a `targets` array of family names; the seed is
-  replayed once per target family through that family's validate operation.
-- `sql-expressions.json` targets the sql-portability-v1 compiler. Entries
-  carry an `id` and either `sql` (the exact source) or `sqlRepeat`
-  (`{ "value": ..., "count": ... }`, expanded by concatenating `count`
-  copies of `value`, optionally between `prefix` and `suffix`).
-
-Seed ids are unique within one file. Seeds carry no expected code: any
-stable rejection is conforming, and an implementation that accepts a seed
-within its limits also conforms.
+Minimize any newly discovered crashing input and add it here with a unique ID.

package/fixtures/identifiers-v1/README.md

@@ -1,15 +1,7 @@
-# Portable identifier version 1 fixtures
+# Portable identifier v1 fixtures
 
-These draft language-neutral fixtures accompany RFC 0002.
+These draft fixtures accompany RFC 0002.
 
-Success entries contain an `id`, a `mode` (`simple` or `qualified`), the exact
-`value`, and the expected `segments`. Rejection entries contain exactly one of
-`value` or `generator` and the required stable `error` code.
+Success cases pin simple or qualified identifiers and their exact segments. Rejection cases contain a literal value or deterministic repeat/segment generator plus the required error code.
 
-Generators expand as follows:
-
-- `repeat-string`: concatenates `count` copies of `value`;
-- `qualified-segments`: joins `count` copies of `segment` with `.`.
-
-Fixture consumers must preserve accepted strings exactly. They must not trim,
-case-fold, normalize, or reinterpret qualified identifiers as SQL names.
+Conforming implementations preserve accepted strings exactly: no trimming, case folding, Unicode normalization, or reinterpretation as SQL identifiers.

package/fixtures/identifiers-v1/rejections.json

@@ -54,5 +54,43 @@
       "count": 9
     },
     "error": "HQ_IDENTIFIER_TOO_MANY_SEGMENTS"
+  },
+  {
+    "id": "qualified-bytes-513",
+    "mode": "qualified",
+    "value": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "error": "HQ_IDENTIFIER_TOO_LONG"
+  },
+  {
+    "id": "reserved-non-first-segment",
+    "mode": "qualified",
+    "value": "orders.__hypequery_internal",
+    "error": "HQ_IDENTIFIER_RESERVED"
+  },
+  {
+    "id": "precedence-length-before-reserved",
+    "mode": "simple",
+    "generator": {
+      "type": "repeat-string",
+      "value": "__hypequery",
+      "count": 12
+    },
+    "error": "HQ_IDENTIFIER_TOO_LONG"
+  },
+  {
+    "id": "precedence-length-before-format",
+    "mode": "simple",
+    "generator": {
+      "type": "repeat-string",
+      "value": "-",
+      "count": 129
+    },
+    "error": "HQ_IDENTIFIER_TOO_LONG"
+  },
+  {
+    "id": "precedence-format-before-reserved",
+    "mode": "simple",
+    "value": "__hypequery-internal",
+    "error": "HQ_IDENTIFIER_INVALID_FORMAT"
   }
 ]

package/fixtures/identifiers-v1/success.json

@@ -22,5 +22,23 @@
     "mode": "qualified",
     "value": "orders.customer.country",
     "segments": ["orders", "customer", "country"]
+  },
+  {
+    "id": "segment-bytes-128",
+    "mode": "simple",
+    "value": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "segments": ["aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"]
+  },
+  {
+    "id": "qualified-segments-8",
+    "mode": "qualified",
+    "value": "s0.s1.s2.s3.s4.s5.s6.s7",
+    "segments": ["s0", "s1", "s2", "s3", "s4", "s5", "s6", "s7"]
+  },
+  {
+    "id": "qualified-bytes-512",
+    "mode": "qualified",
+    "value": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+    "segments": ["aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"]
   }
 ]