@hypequery/protocol 0.13.0 → 0.15.0

package/README.md

@@ -22,7 +22,7 @@ This package implements those rules in TypeScript. Python and other implementati
 - closed semantic expression and query envelopes
 - portable input and output schemas
 - trusted query implementation artifacts
-- dataset and named-query deployment contracts
+- dataset deployment contracts with base and derived measures
 - closed deployment bundle manifests
 - project/environment release envelopes
 - compiled query settings, cancellation, events, and diagnostics
@@ -53,7 +53,7 @@ Schema validators cover the declarative Serve/Zod features that can travel betwe
 
 ## Deployment artifacts
 
-A deployment combines dataset definitions, named Serve queries, endpoint policy, and runtime artifact identities in one strict versioned envelope. Bundle manifests bind that deployment and every runtime file by path, byte length, and hash. Release envelopes bind a verified bundle to one explicit project and environment.
+A deployment combines dataset definitions and endpoint policies in one strict versioned envelope. Derived measures live alongside base measures in each dataset; queries and standalone metrics are not deployment targets. Bundle manifests bind declared files by path, byte length, and hash; the deployment verifier accepts only bundles with no runtime artifacts. Release envelopes bind a verified bundle to one explicit project and environment.
 
 Canonical encoders and domain-separated SHA-256 identities make these artifacts reproducible across language implementations. Filesystem-safe construction and verification live in `@hypequery/deployment` and the CLI.
 

package/dist/deployments/codec.d.ts

@@ -1,18 +1,13 @@
 import type { ProtocolDeploymentContract, ProtocolDeploymentOptions } from './types.js';
-/** Domain prefix for deployment contract v1 identities. */
-export declare const PROTOCOL_DEPLOYMENT_IDENTITY_DOMAIN = "hypequery:deployment:v1\0";
+export declare const PROTOCOL_DEPLOYMENT_IDENTITY_DOMAIN = "hypequery:deployment:v2\0";
 export interface PreparedProtocolDeploymentContract {
     readonly contract: ProtocolDeploymentContract;
     readonly canonical: string;
     readonly bytes: Uint8Array;
     readonly identity: string;
 }
-/** Validates and serializes once, returning every deployment artifact representation. */
 export declare function prepareProtocolDeploymentContract(input: unknown, options?: ProtocolDeploymentOptions): PreparedProtocolDeploymentContract;
-/** Validates a deployment contract and returns canonical RFC 8785 UTF-8 bytes. */
 export declare function encodeProtocolDeploymentContract(input: unknown, options?: ProtocolDeploymentOptions): Uint8Array;
-/** String form of the canonical deployment contract bytes. */
-export declare function encodeProtocolDeploymentContractToString(input: unknown, options?: ProtocolDeploymentOptions): string;
-/** Domain-separated SHA-256 identity of a validated deployment contract. */
 export declare function hashProtocolDeploymentContract(input: unknown, options?: ProtocolDeploymentOptions): string;
+export declare function encodeProtocolDeploymentContractToString(input: unknown, options?: ProtocolDeploymentOptions): string;
 //# sourceMappingURL=codec.d.ts.map

package/dist/deployments/codec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../src/deployments/codec.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAKxF,2DAA2D;AAC3D,eAAO,MAAM,mCAAmC,8BAA8B,CAAC;AAE/E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,yFAAyF;AACzF,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,kCAAkC,CAcpC;AAED,kFAAkF;AAClF,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,UAAU,CAEZ;AAED,8DAA8D;AAC9D,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAER;AAED,4EAA4E;AAC5E,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAER"}
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../src/deployments/codec.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAKxF,eAAO,MAAM,mCAAmC,8BAA8B,CAAC;AAE/E,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,kCAAkC,CASpC;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,UAAU,CAEZ;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAER;AAED,wBAAgB,wCAAwC,CACtD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAER"}

package/dist/deployments/codec.js

@@ -3,9 +3,7 @@ import { bytesToHex } from '@noble/hashes/utils';
 import { serializeJcs } from '../values/jcs.js';
 import { validateProtocolDeploymentContract } from './validate.js';
 const textEncoder = new TextEncoder();
-/** Domain prefix for deployment contract v1 identities. */
-export const PROTOCOL_DEPLOYMENT_IDENTITY_DOMAIN = 'hypequery:deployment:v1\0';
-/** Validates and serializes once, returning every deployment artifact representation. */
+export const PROTOCOL_DEPLOYMENT_IDENTITY_DOMAIN = 'hypequery:deployment:v2\0';
 export function prepareProtocolDeploymentContract(input, options = {}) {
     const contract = validateProtocolDeploymentContract(input, options);
     const canonical = serializeJcs(contract);
@@ -14,22 +12,14 @@ export function prepareProtocolDeploymentContract(input, options = {}) {
         .update(textEncoder.encode(PROTOCOL_DEPLOYMENT_IDENTITY_DOMAIN))
         .update(bytes)
         .digest());
-    return Object.freeze({
-        contract,
-        canonical,
-        bytes,
-        identity,
-    });
+    return Object.freeze({ contract, canonical, bytes, identity });
 }
-/** Validates a deployment contract and returns canonical RFC 8785 UTF-8 bytes. */
 export function encodeProtocolDeploymentContract(input, options = {}) {
     return prepareProtocolDeploymentContract(input, options).bytes;
 }
-/** String form of the canonical deployment contract bytes. */
-export function encodeProtocolDeploymentContractToString(input, options = {}) {
-    return prepareProtocolDeploymentContract(input, options).canonical;
-}
-/** Domain-separated SHA-256 identity of a validated deployment contract. */
 export function hashProtocolDeploymentContract(input, options = {}) {
     return prepareProtocolDeploymentContract(input, options).identity;
 }
+export function encodeProtocolDeploymentContractToString(input, options = {}) {
+    return prepareProtocolDeploymentContract(input, options).canonical;
+}

package/dist/deployments/index.d.ts

@@ -3,5 +3,5 @@ export { PROTOCOL_DEPLOYMENT_IDENTITY_DOMAIN, encodeProtocolDeploymentContract,
 export type { PreparedProtocolDeploymentContract } from './codec.js';
 export { DEFAULT_PROTOCOL_DEPLOYMENT_LIMITS } from './limits.js';
 export { validateProtocolDatasetContract, validateProtocolDeploymentContract, } from './validate.js';
-export type { ProtocolAccessPolicy, ProtocolDatasetContract, ProtocolDatasetDefaults, ProtocolDatasetDimension, ProtocolDatasetFieldSource, ProtocolDatasetFieldType, ProtocolDatasetFilter, ProtocolDatasetFreshness, ProtocolDatasetLimits, ProtocolDatasetMeasure, ProtocolDatasetMetric, ProtocolDatasetRelationship, ProtocolDatasetTenantPolicy, ProtocolSemanticMetadata, ProtocolSemanticSensitivity, ProtocolDeploymentContract, ProtocolDeploymentErrorCode, ProtocolDeploymentLimits, ProtocolDeploymentOptions, ProtocolEndpointPolicy, ProtocolEndpointTenantPolicy, ProtocolMetricDerivation, ProtocolMetricInput, ProtocolNamedQueryContract, ProtocolRuntimeArtifact, } from './types.js';
+export type { ProtocolDatasetDerivedMeasure, ProtocolDeploymentDataset, ProtocolDeploymentMeasure, ProtocolAccessPolicy, ProtocolDatasetContract, ProtocolDatasetDefaults, ProtocolDatasetDimension, ProtocolDatasetFieldSource, ProtocolDatasetFieldType, ProtocolDatasetFilter, ProtocolDatasetFreshness, ProtocolDatasetLimits, ProtocolDatasetMeasure, ProtocolDatasetMetric, ProtocolDatasetRelationship, ProtocolDatasetTenantPolicy, ProtocolSemanticMetadata, ProtocolSemanticSensitivity, ProtocolDeploymentContract, ProtocolDeploymentErrorCode, ProtocolDeploymentLimits, ProtocolDeploymentOptions, ProtocolEndpointPolicy, ProtocolEndpointTenantPolicy, ProtocolMetricDerivation, ProtocolMetricInput, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/deployments/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deployments/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,mCAAmC,EACnC,gCAAgC,EAChC,wCAAwC,EACxC,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,+BAA+B,EAC/B,kCAAkC,GACnC,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deployments/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,mCAAmC,EACnC,gCAAgC,EAChC,wCAAwC,EACxC,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,kCAAkC,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,+BAA+B,EAC/B,kCAAkC,GACnC,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,YAAY,CAAC"}

package/dist/deployments/limits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/deployments/limits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEtF,eAAO,MAAM,kCAAkC,EAAE,QAAQ,CAAC,wBAAwB,CAShF,CAAC;AAEH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,yBAA8B,GACtC,QAAQ,CAAC,wBAAwB,CAAC,CAcpC"}
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/deployments/limits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEtF,eAAO,MAAM,kCAAkC,EAAE,QAAQ,CAAC,wBAAwB,CAOhF,CAAC;AAEH,wBAAgB,uBAAuB,CACrC,OAAO,GAAE,yBAA8B,GACtC,QAAQ,CAAC,wBAAwB,CAAC,CAcpC"}

package/dist/deployments/limits.js

@@ -1,7 +1,5 @@
 export const DEFAULT_PROTOCOL_DEPLOYMENT_LIMITS = Object.freeze({
     maxDatasets: 100,
-    maxQueries: 1_000,
-    maxArtifacts: 100,
     maxDatasetItems: 1_000,
     maxSemanticMetadataItems: 100,
     maxTextBytes: 4_096,
@@ -16,7 +14,7 @@ export function resolveDeploymentLimits(options = {}) {
             continue;
         const maximum = DEFAULT_PROTOCOL_DEPLOYMENT_LIMITS[key];
         if (!Number.isSafeInteger(value) || value < 1 || value > maximum) {
-            throw new RangeError(`${key} must be a positive safe integer no greater than ${maximum} (the deployment contract v1 maximum)`);
+            throw new RangeError(`${key} must be a positive safe integer no greater than ${maximum} (the deployment contract maximum)`);
         }
         result[key] = value;
     }

package/dist/deployments/types.d.ts

@@ -1,7 +1,6 @@
 import type { ProtocolExpression, ProtocolTimeGrain } from '../expressions/index.js';
 import type { ProtocolIdentifier, ProtocolQualifiedIdentifier } from '../identifiers/index.js';
-import type { ProtocolQueryImplementation, ProtocolSqlExpression } from '../query-implementations/index.js';
-import type { ProtocolSchema } from '../schemas/index.js';
+import type { ProtocolSqlExpression } from '../query-implementations/index.js';
 export type ProtocolDatasetFieldType = 'string' | 'number' | 'boolean' | 'timestamp';
 export type ProtocolSemanticSensitivity = 'public' | 'internal' | 'confidential' | 'restricted';
 export interface ProtocolSemanticMetadata {
@@ -148,34 +147,35 @@ export interface ProtocolDatasetContract extends ProtocolSemanticMetadata {
     readonly limits?: ProtocolDatasetLimits;
     readonly endpoint?: ProtocolEndpointPolicy;
 }
-export interface ProtocolNamedQueryContract {
+/** A post-aggregation formula over base measures in the same dataset. */
+export interface ProtocolDatasetDerivedMeasure extends ProtocolSemanticMetadata {
+    readonly kind: 'derived';
     readonly name: ProtocolIdentifier;
-    readonly input: ProtocolSchema;
-    readonly output: ProtocolSchema;
-    readonly implementation: ProtocolQueryImplementation;
-    readonly endpoint: ProtocolEndpointPolicy & {
-        readonly method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS';
-        readonly path: string;
-    };
-    readonly summary?: string;
+    /** Authored alias order is retained for deterministic reconstruction. */
+    readonly uses: readonly {
+        readonly alias: ProtocolIdentifier;
+        readonly measure: ProtocolIdentifier;
+    }[];
+    readonly expression: ProtocolExpression;
+    readonly label?: string;
     readonly description?: string;
-    readonly tags: readonly string[];
 }
-export interface ProtocolRuntimeArtifact {
-    readonly runtime: 'node' | 'python';
-    readonly artifactSha256: string;
+/** The v2 wire folds authored base and derived measures into one collection. */
+export type ProtocolDeploymentMeasure = ProtocolDatasetMeasure | ProtocolDatasetDerivedMeasure;
+export interface ProtocolDeploymentDataset extends Omit<ProtocolDatasetContract, 'measures' | 'metrics'> {
+    readonly measures: readonly ProtocolDeploymentMeasure[];
+    readonly metrics?: never;
 }
+/** The deployment contract contains executable datasets and derived measures. */
 export interface ProtocolDeploymentContract {
     readonly kind: 'hypequery-deployment';
-    readonly version: 1;
-    readonly datasets: readonly ProtocolDatasetContract[];
-    readonly queries: readonly ProtocolNamedQueryContract[];
-    readonly artifacts: readonly ProtocolRuntimeArtifact[];
+    readonly version: 2;
+    readonly datasets: readonly ProtocolDeploymentDataset[];
+    readonly queries?: never;
+    readonly artifacts?: never;
 }
 export interface ProtocolDeploymentLimits {
     readonly maxDatasets: number;
-    readonly maxQueries: number;
-    readonly maxArtifacts: number;
     readonly maxDatasetItems: number;
     /**
      * Ceiling on each semantic-metadata collection (`examples`, `synonyms`, and
@@ -193,7 +193,7 @@ export interface ProtocolDeploymentLimits {
  *
  * Each configured value must be a positive safe integer no greater than the
  * corresponding value in `DEFAULT_PROTOCOL_DEPLOYMENT_LIMITS`. These options
- * may tighten the deployment-contract v1 conformance limits, but cannot raise
+ * may tighten the deployment contract limits, but cannot raise
  * them; they are not deployment capacity settings.
  */
 export interface ProtocolDeploymentOptions {

package/dist/deployments/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/deployments/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,KAAK,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAC/F,OAAO,KAAK,EACV,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AACrF,MAAM,MAAM,2BAA2B,GAAG,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;AAEhG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAC;CACpD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CACxC;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,CAAC;AAEN,MAAM,MAAM,4BAA4B,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACjC;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD,qBAAqB,CAAC;AAE1B,MAAM,WAAW,wBAAyB,SAAQ,wBAAwB;IACxE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAuB,SAAQ,wBAAwB;IACtE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAChB,KAAK,GAAG,OAAO,GAAG,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GACzD,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAsB,SAAQ,wBAAwB;IACrE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,SAAS,CACzB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAC1C,IAAI,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,EAAE,EAAE,2BAA2B,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED,MAAM,WAAW,qBAAsB,SAAQ,wBAAwB;IACrE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC5D,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,uBAAwB,SAAQ,wBAAwB;IACvE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,2BAA2B,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,GAAG;QAC1C,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;QACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,2BAA2B,GACnC,oBAAoB,GACpB,6BAA6B,GAC7B,+BAA+B,GAC/B,kCAAkC,GAClC,6BAA6B,GAC7B,iCAAiC,GACjC,8BAA8B,GAC9B,yBAAyB,GACzB,6BAA6B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/deployments/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,KAAK,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAC/F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE/E,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AACrF,MAAM,MAAM,2BAA2B,GAAG,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;AAEhG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAC;CACpD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CACxC;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,CAAC;AAEN,MAAM,MAAM,4BAA4B,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACjC;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,QAAQ,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpD,qBAAqB,CAAC;AAE1B,MAAM,WAAW,wBAAyB,SAAQ,wBAAwB;IACxE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAuB,SAAQ,wBAAwB;IACtE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,WAAW,EAChB,KAAK,GAAG,OAAO,GAAG,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GACzD,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAsB,SAAQ,wBAAwB;IACrE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,SAAS,CACzB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAC1C,IAAI,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,EAAE,EAAE,2BAA2B,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED,MAAM,WAAW,qBAAsB,SAAQ,wBAAwB;IACrE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,wBAAwB,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC5D,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,uBAAwB,SAAQ,wBAAwB;IACvE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IAC/D,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC5C;AAED,yEAAyE;AACzE,MAAM,WAAW,6BAA8B,SAAQ,wBAAwB;IAC7E,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,SAAS;QACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;QACnC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;KACtC,EAAE,CAAC;IACJ,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,gFAAgF;AAChF,MAAM,MAAM,yBAAyB,GAAG,sBAAsB,GAAG,6BAA6B,CAAC;AAE/F,MAAM,WAAW,yBAA0B,SAAQ,IAAI,CAAC,uBAAuB,EAAE,UAAU,GAAG,SAAS,CAAC;IACtG,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,2BAA2B,GACnC,oBAAoB,GACpB,6BAA6B,GAC7B,+BAA+B,GAC/B,kCAAkC,GAClC,6BAA6B,GAC7B,iCAAiC,GACjC,8BAA8B,GAC9B,yBAAyB,GACzB,6BAA6B,CAAC"}

package/dist/deployments/validate.d.ts

@@ -1,4 +1,5 @@
 import type { ProtocolDatasetContract, ProtocolDeploymentContract, ProtocolDeploymentOptions } from './types.js';
 export declare function validateProtocolDatasetContract(input: unknown, options?: ProtocolDeploymentOptions): ProtocolDatasetContract;
+/** Validate the deployment contract. Unsupported fields are forbidden, even when empty. */
 export declare function validateProtocolDeploymentContract(input: unknown, options?: ProtocolDeploymentOptions): ProtocolDeploymentContract;
 //# sourceMappingURL=validate.d.ts.map

package/dist/deployments/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/deployments/validate.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAEV,uBAAuB,EAUvB,0BAA0B,EAE1B,yBAAyB,EAK1B,MAAM,YAAY,CAAC;AA0wBpB,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,uBAAuB,CAEzB;AAqLD,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,0BAA0B,CA2C5B"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/deployments/validate.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAEV,uBAAuB,EAEvB,0BAA0B,EAa1B,yBAAyB,EAG1B,MAAM,YAAY,CAAC;AAqwBpB,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,uBAAuB,CAEzB;AA8ID,2FAA2F;AAC3F,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,0BAA0B,CAU5B"}

package/dist/deployments/validate.js

@@ -1,11 +1,9 @@
 import { ProtocolExpressionError, validateProtocolExpression } from '../expressions/index.js';
 import { ProtocolIdentifierError, parseProtocolIdentifier, parseProtocolQualifiedIdentifier, } from '../identifiers/index.js';
-import { ProtocolQueryImplementationError, validateProtocolQueryImplementation, validateProtocolSqlExpression, } from '../query-implementations/index.js';
-import { ProtocolSchemaError, validateProtocolSchema, } from '../schemas/index.js';
+import { validateProtocolSqlExpression } from '../sql-expressions/validate.js';
 import { deploymentError } from './errors.js';
 import { resolveDeploymentLimits } from './limits.js';
 const textEncoder = new TextEncoder();
-const SHA256_PATTERN = /^[0-9a-f]{64}$/;
 const AGGREGATIONS = new Set([
     'sum', 'count', 'countDistinct', 'avg', 'min', 'max',
     'argMax', 'argMin', 'percentile', 'stddev', 'variance',
@@ -51,8 +49,10 @@ function requireArray(input, path, maxItems) {
             deploymentError('HQ_DEPLOYMENT_UNSAFE_OBJECT', `${path}[${index}]`);
         }
     }
-    if (Object.keys(input).length !== input.length)
+    if (Object.keys(input).length !== input.length
+        || Object.getOwnPropertyNames(input).length !== input.length + 1) {
         deploymentError('HQ_DEPLOYMENT_UNSAFE_OBJECT', path);
+    }
     return input;
 }
 function exactFields(value, required, optional, path) {
@@ -179,9 +179,9 @@ function validateEndpointTenant(input, path, limits) {
         deploymentError('HQ_DEPLOYMENT_TYPE', `${path}.kind`);
     deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `${path}.kind`);
 }
-function validateEndpoint(input, path, limits, transport = false) {
+function validateEndpoint(input, path, limits) {
     const value = requireRecord(input, path);
-    exactFields(value, transport ? ['access', 'tenant', 'method', 'path'] : ['access', 'tenant'], transport ? ['cacheTtlMs', 'maxLimit'] : ['cacheTtlMs', 'maxLimit', 'path'], path);
+    exactFields(value, ['access', 'tenant'], ['cacheTtlMs', 'maxLimit', 'path'], path);
     const result = {
         access: validateAccess(value.access, `${path}.access`, limits),
         tenant: validateEndpointTenant(value.tenant, `${path}.tenant`, limits),
@@ -190,22 +190,12 @@ function validateEndpoint(input, path, limits, transport = false) {
         result.cacheTtlMs = positiveInteger(value.cacheTtlMs, `${path}.cacheTtlMs`);
     if (value.maxLimit !== undefined)
         result.maxLimit = positiveInteger(value.maxLimit, `${path}.maxLimit`);
-    if (!transport && value.path !== undefined) {
+    if (value.path !== undefined) {
         const endpointPath = boundedText(value.path, `${path}.path`, limits.maxPathBytes);
         if (!endpointPath.startsWith('/'))
             deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `${path}.path`);
         result.path = endpointPath;
     }
-    if (transport) {
-        if (!['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'].includes(value.method)) {
-            deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `${path}.method`);
-        }
-        const endpointPath = boundedText(value.path, `${path}.path`, limits.maxPathBytes);
-        if (!endpointPath.startsWith('/'))
-            deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `${path}.path`);
-        result.method = value.method;
-        result.path = endpointPath;
-    }
     return freezeRecord(result);
 }
 function validateTenant(input, path, limits) {
@@ -230,9 +220,7 @@ function nested(action, path) {
         return action();
     }
     catch (error) {
-        if (error instanceof ProtocolExpressionError
-            || error instanceof ProtocolQueryImplementationError
-            || error instanceof ProtocolSchemaError) {
+        if (error instanceof ProtocolExpressionError) {
             deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', path);
         }
         throw error;
@@ -576,13 +564,13 @@ function validateDefaults(input, path, limits) {
     return freezeRecord(result);
 }
 function namedItems(input, path, maxItems, validate) {
-    const items = requireArray(input, path, maxItems).map((value, index) => validate(value, `${path}[${index}]`));
+    const items = requireArray(input, path, maxItems).map((value, index) => validate(value, `${path}[${index}]`, index));
     if (new Set(items.map(item => item.name)).size !== items.length) {
         deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', path);
     }
     return Object.freeze(items);
 }
-function validateDataset(input, path, limits) {
+function validateDataset(input, path, limits, measureIndices) {
     const value = requireRecord(input, path);
     exactFields(value, ['name', 'source', 'tenant', 'dimensions', 'measures', 'filters', 'metrics', 'relationships'], [
         'description', 'freshness', 'owner', 'defaults',
@@ -594,7 +582,7 @@ function validateDataset(input, path, limits) {
         source: boundedText(value.source, `${path}.source`, limits.maxSourceBytes),
         tenant: validateTenant(value.tenant, `${path}.tenant`, limits),
         dimensions: namedItems(value.dimensions, `${path}.dimensions`, limits.maxDatasetItems, (item, itemPath) => validateDimension(item, itemPath, limits)),
-        measures: namedItems(value.measures, `${path}.measures`, limits.maxDatasetItems, (item, itemPath) => validateMeasure(item, itemPath, limits)),
+        measures: namedItems(value.measures, `${path}.measures`, limits.maxDatasetItems, (item, itemPath, index) => validateMeasure(item, measureIndices === undefined ? itemPath : `${path}.measures[${measureIndices[index]}]`, limits)),
         filters: namedItems(value.filters, `${path}.filters`, limits.maxDatasetItems, (item, itemPath) => validateFilter(item, itemPath, limits)),
         metrics: namedItems(value.metrics, `${path}.metrics`, limits.maxDatasetItems, (item, itemPath) => validateMetric(item, itemPath, limits)),
         relationships: namedItems(value.relationships, `${path}.relationships`, limits.maxDatasetItems, (item, itemPath) => validateRelationship(item, itemPath)),
@@ -619,157 +607,127 @@ function validateDataset(input, path, limits) {
 export function validateProtocolDatasetContract(input, options = {}) {
     return validateDataset(input, '$', resolveDeploymentLimits(options));
 }
-function validateQuery(input, path, limits) {
-    const value = requireRecord(input, path);
-    exactFields(value, ['name', 'input', 'output', 'implementation', 'endpoint', 'tags'], ['summary', 'description'], path);
-    const result = {
-        name: identifier(value.name, `${path}.name`),
-        input: nested(() => validateProtocolSchema(value.input), `${path}.input`),
-        output: nested(() => validateProtocolSchema(value.output), `${path}.output`),
-        implementation: nested(() => validateProtocolQueryImplementation(value.implementation), `${path}.implementation`),
-        endpoint: validateEndpoint(value.endpoint, `${path}.endpoint`, limits, true),
-        tags: uniqueStrings(value.tags, `${path}.tags`, limits.maxDatasetItems, (tag, tagPath) => boundedText(tag, tagPath, limits.maxTextBytes)),
-    };
-    optionalText(value.summary, 'summary', result, path, limits);
-    optionalText(value.description, 'description', result, path, limits);
-    return freezeRecord(result);
-}
-function validateArtifact(input, path) {
-    const value = requireRecord(input, path);
-    exactFields(value, ['runtime', 'artifactSha256'], [], path);
-    if (value.runtime !== 'node' && value.runtime !== 'python') {
-        deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `${path}.runtime`);
-    }
-    if (typeof value.artifactSha256 !== 'string' || !SHA256_PATTERN.test(value.artifactSha256)) {
-        deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `${path}.artifactSha256`);
-    }
-    return freezeRecord({
-        runtime: value.runtime,
-        artifactSha256: value.artifactSha256,
-    });
-}
-function validateReferences(contract) {
-    const datasets = new Map(contract.datasets.map(dataset => [dataset.name, dataset]));
-    for (const [datasetIndex, dataset] of contract.datasets.entries()) {
+function validateDatasetReferences(datasets) {
+    const names = new Set(datasets.map(dataset => dataset.name));
+    for (const [index, dataset] of datasets.entries()) {
         if (dataset.defaults?.dimensions?.some(name => (!dataset.dimensions.some(dimension => dimension.name === name && dimension.groupable)))) {
-            deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${datasetIndex}].defaults.dimensions`);
+            deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${index}].defaults.dimensions`);
         }
         if (dataset.defaults?.timeGrain !== undefined && dataset.timeField === undefined) {
-            deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${datasetIndex}].defaults.timeGrain`);
+            deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${index}].defaults.timeGrain`);
         }
         for (const [relationshipIndex, relationship] of dataset.relationships.entries()) {
-            if (!datasets.has(relationship.target)) {
-                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${datasetIndex}].relationships[${relationshipIndex}].target`);
-            }
-        }
-        const filters = new Set(dataset.filters.map(filter => filter.name));
-        const hasDimension = (name) => {
-            const [head, ...tail] = name.split('.');
-            if (tail.length === 0)
-                return dataset.dimensions.some(dimension => dimension.name === head);
-            const relationship = dataset.relationships.find(candidate => candidate.name === head && candidate.queryable);
-            const target = relationship ? datasets.get(relationship.target) : undefined;
-            return target?.dimensions.some(dimension => dimension.name === tail.join('.')) ?? false;
-        };
-        for (const [metricIndex, metric] of dataset.metrics.entries()) {
-            if (metric.dimensions.some(dimension => !hasDimension(dimension))
-                || metric.filters.some(filter => !filters.has(filter))) {
-                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${datasetIndex}].metrics[${metricIndex}]`);
-            }
-            if ((metric.kind === 'grained-metric' || metric.grains.length > 0)
-                && dataset.timeField === undefined) {
-                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${datasetIndex}].metrics[${metricIndex}].grains`);
-            }
-            // Biconditional, as for a compiled-SQL query below. An endpoint that
-            // requires a tenant over a dataset carrying no tenant field resolves one
-            // and then has no column to scope by, so the query reads every tenant
-            // while both layers believe tenancy was enforced.
-            if ((dataset.tenant.kind === 'required') !== (metric.endpoint.tenant.kind === 'required')) {
-                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${datasetIndex}].metrics[${metricIndex}].endpoint.tenant`);
+            if (!names.has(relationship.target)) {
+                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${index}].relationships[${relationshipIndex}].target`);
             }
         }
         if (dataset.endpoint !== undefined
             && (dataset.tenant.kind === 'required') !== (dataset.endpoint.tenant.kind === 'required')) {
-            deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${datasetIndex}].endpoint.tenant`);
+            deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.datasets[${index}].endpoint.tenant`);
         }
     }
-    const artifacts = new Map(contract.artifacts.map(artifact => [artifact.artifactSha256, artifact.runtime]));
-    for (const [queryIndex, query] of contract.queries.entries()) {
-        if (query.implementation.kind === 'runtime-reference'
-            && artifacts.get(query.implementation.artifactSha256) !== query.implementation.runtime) {
-            deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.queries[${queryIndex}].implementation.artifactSha256`);
-        }
-        if (query.implementation.kind === 'compiled-sql') {
-            const implementationRequiresTenant = query.implementation.tenant.kind === 'required';
-            const endpointRequiresTenant = query.endpoint.tenant.kind === 'required';
-            if (implementationRequiresTenant !== endpointRequiresTenant) {
-                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.queries[${queryIndex}].endpoint.tenant`);
-            }
-            for (const [parameterIndex, parameter] of query.implementation.parameters.entries()) {
-                if (parameter.source.kind === 'input'
-                    && !schemaContainsPath(query.input, parameter.source.path.split('.'))) {
-                    deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.queries[${queryIndex}].implementation.parameters[${parameterIndex}].source.path`);
-                }
-            }
-        }
-        if (query.implementation.kind === 'semantic-plan') {
-            const dataset = datasets.get(query.implementation.query.dataset);
-            if (!dataset) {
-                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.queries[${queryIndex}].implementation.query.dataset`);
-            }
-            if (dataset.tenant.kind === 'required' && query.endpoint.tenant.kind !== 'required') {
-                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `$.queries[${queryIndex}].endpoint.tenant`);
-            }
-        }
+}
+function formulaReferences(expression, names) {
+    switch (expression.kind) {
+        case 'reference':
+            names.add(expression.name);
+            return;
+        case 'binary':
+            formulaReferences(expression.left, names);
+            formulaReferences(expression.right, names);
+            return;
+        case 'call':
+            expression.args.forEach(argument => formulaReferences(argument, names));
+            return;
+        default:
+            // validateFormulaGrammar has already rejected every other node.
+            return;
     }
 }
-function schemaContainsPath(schema, segments) {
-    if (segments.length === 0)
-        return true;
-    if (schema.kind === 'any')
-        return true;
-    if (schema.kind === 'union') {
-        return schema.variants.every(variant => schemaContainsPath(variant, segments));
+function validateDatasetDerivedMeasure(input, path, limits) {
+    const value = requireRecord(input, path);
+    exactFields(value, ['kind', 'name', 'uses', 'expression'], [
+        'label', 'description', ...SEMANTIC_METADATA_FIELDS,
+    ], path);
+    if (value.kind !== 'derived')
+        deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `${path}.kind`);
+    const uses = requireArray(value.uses, `${path}.uses`, limits.maxDatasetItems)
+        .map((inputUse, index) => {
+        const usePath = `${path}.uses[${index}]`;
+        const use = requireRecord(inputUse, usePath);
+        exactFields(use, ['alias', 'measure'], [], usePath);
+        return freezeRecord({
+            alias: identifier(use.alias, `${usePath}.alias`),
+            measure: identifier(use.measure, `${usePath}.measure`),
+        });
+    });
+    if (uses.length === 0 || new Set(uses.map(use => use.alias)).size !== uses.length) {
+        deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `${path}.uses`);
     }
-    if (schema.kind === 'record') {
-        return schemaContainsPath(schema.values, segments.slice(1));
+    const expression = nested(() => validateProtocolExpression(value.expression), `${path}.expression`);
+    validateFormulaGrammar(expression, `${path}.expression`);
+    if (expression.kind === 'reference') {
+        deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `${path}.expression`);
     }
-    if (schema.kind !== 'object')
-        return false;
-    const [head, ...tail] = segments;
-    const property = schema.properties[head];
-    return property !== undefined && schemaContainsPath(property, tail);
+    const references = new Set();
+    formulaReferences(expression, references);
+    if (references.size !== uses.length || uses.some(use => !references.has(use.alias))) {
+        deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `${path}.expression`);
+    }
+    const result = {
+        kind: 'derived',
+        name: identifier(value.name, `${path}.name`),
+        uses: Object.freeze(uses),
+        expression,
+    };
+    optionalText(value.label, 'label', result, path, limits);
+    optionalText(value.description, 'description', result, path, limits);
+    validateSemanticMetadata(value, result, path, limits);
+    return freezeRecord(result);
+}
+function validateDeploymentDataset(input, path, limits) {
+    const value = requireRecord(input, path);
+    exactFields(value, ['name', 'source', 'tenant', 'dimensions', 'measures', 'filters', 'relationships'], [
+        'description', 'freshness', 'owner', 'defaults',
+        ...SEMANTIC_METADATA_FIELDS, 'timeField', 'limits', 'endpoint',
+    ], path);
+    const measures = requireArray(value.measures, `${path}.measures`, limits.maxDatasetItems)
+        .map((measure, index) => requireRecord(measure, `${path}.measures[${index}]`));
+    // Preserve original indices when validating base measures separately.
+    const baseEntries = measures.flatMap((measure, index) => (measure.kind === 'derived'
+        ? [] : [{ measure, index }]));
+    const validated = validateDataset({ ...value, measures: baseEntries.map(entry => entry.measure), metrics: [] }, path, limits, baseEntries.map(entry => entry.index));
+    const derived = measures.map((measure, index) => (measure.kind === 'derived'
+        ? validateDatasetDerivedMeasure(measure, `${path}.measures[${index}]`, limits)
+        : undefined));
+    const baseByName = new Map(validated.measures.map(measure => [measure.name, measure]));
+    let baseIndex = 0;
+    const ordered = measures.map((_, index) => (derived[index] ?? validated.measures[baseIndex++]));
+    if (new Set(ordered.map(measure => measure.name)).size !== measures.length) {
+        deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `${path}.measures`);
+    }
+    for (const [index, item] of derived.entries()) {
+        if (!item)
+            continue;
+        for (const [useIndex, use] of item.uses.entries()) {
+            if (!baseByName.has(use.measure)) {
+                deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', `${path}.measures[${index}].uses[${useIndex}].measure`);
+            }
+        }
+    }
+    const { metrics: _metrics, ...dataset } = validated;
+    return freezeRecord({ ...dataset, measures: Object.freeze(ordered) });
 }
+/** Validate the deployment contract. Unsupported fields are forbidden, even when empty. */
 export function validateProtocolDeploymentContract(input, options = {}) {
     const limits = resolveDeploymentLimits(options);
     const value = requireRecord(input, '$');
-    exactFields(value, ['kind', 'version', 'datasets', 'queries', 'artifacts'], [], '$');
+    exactFields(value, ['kind', 'version', 'datasets'], [], '$');
     if (value.kind !== 'hypequery-deployment')
         deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', '$.kind');
-    if (value.version !== 1)
+    if (value.version !== 2)
         deploymentError('HQ_DEPLOYMENT_INVALID_VERSION', '$.version');
-    const datasets = namedItems(value.datasets, '$.datasets', limits.maxDatasets, (dataset, path) => validateDataset(dataset, path, limits));
-    const queries = namedItems(value.queries, '$.queries', limits.maxQueries, (query, path) => validateQuery(query, path, limits));
-    const artifacts = Object.freeze(requireArray(value.artifacts, '$.artifacts', limits.maxArtifacts)
-        .map((artifact, index) => validateArtifact(artifact, `$.artifacts[${index}]`)));
-    if (new Set(artifacts.map(artifact => artifact.artifactSha256)).size !== artifacts.length) {
-        deploymentError('HQ_DEPLOYMENT_INVALID_REFERENCE', '$.artifacts');
-    }
-    const result = freezeRecord({
-        kind: 'hypequery-deployment',
-        version: 1,
-        datasets,
-        queries,
-        artifacts,
-    });
-    const routes = new Set();
-    for (const [queryIndex, query] of queries.entries()) {
-        const route = `${query.endpoint.method}\0${query.endpoint.path}`;
-        if (routes.has(route)) {
-            deploymentError('HQ_DEPLOYMENT_INVALID_VALUE', `$.queries[${queryIndex}].endpoint`);
-        }
-        routes.add(route);
-    }
-    validateReferences(result);
-    return result;
+    const datasets = namedItems(value.datasets, '$.datasets', limits.maxDatasets, (item, path) => validateDeploymentDataset(item, path, limits));
+    validateDatasetReferences(datasets);
+    return freezeRecord({ kind: 'hypequery-deployment', version: 2, datasets });
 }

package/dist/index.d.ts

@@ -18,7 +18,7 @@ export { DEFAULT_PROTOCOL_DEPLOYMENT_RELEASE_LIMITS, PROTOCOL_DEPLOYMENT_RELEASE
 export type { PreparedProtocolDeploymentReleaseEnvelope, ProtocolDeploymentReleaseEnvelope, ProtocolDeploymentReleaseErrorCode, ProtocolDeploymentReleaseLimits, ProtocolDeploymentReleaseOptions, ProtocolDeploymentReleaseTarget, } from './releases/index.js';
 export type { PreparedProtocolDeploymentBundleManifest, ProtocolDeploymentBundleArtifact, ProtocolDeploymentBundleDeployment, ProtocolDeploymentBundleErrorCode, ProtocolDeploymentBundleFile, ProtocolDeploymentBundleLimits, ProtocolDeploymentBundleManifest, ProtocolDeploymentBundleOptions, } from './bundles/index.js';
 export { DEFAULT_PROTOCOL_DEPLOYMENT_LIMITS, PROTOCOL_DEPLOYMENT_IDENTITY_DOMAIN, ProtocolDeploymentError, encodeProtocolDeploymentContract, encodeProtocolDeploymentContractToString, hashProtocolDeploymentContract, prepareProtocolDeploymentContract, validateProtocolDatasetContract, validateProtocolDeploymentContract, } from './deployments/index.js';
-export type { PreparedProtocolDeploymentContract, ProtocolAccessPolicy, ProtocolDatasetContract, ProtocolDatasetDefaults, ProtocolDatasetDimension, ProtocolDatasetFieldSource, ProtocolDatasetFieldType, ProtocolDatasetFilter, ProtocolDatasetFreshness, ProtocolDatasetLimits, ProtocolDatasetMeasure, ProtocolDatasetMetric, ProtocolDatasetRelationship, ProtocolDatasetTenantPolicy, ProtocolSemanticMetadata, ProtocolSemanticSensitivity, ProtocolDeploymentContract, ProtocolDeploymentErrorCode, ProtocolDeploymentLimits, ProtocolDeploymentOptions, ProtocolEndpointPolicy, ProtocolEndpointTenantPolicy, ProtocolMetricDerivation, ProtocolMetricInput, ProtocolNamedQueryContract, ProtocolRuntimeArtifact, } from './deployments/index.js';
+export type { ProtocolDatasetDerivedMeasure, ProtocolDeploymentDataset, ProtocolDeploymentMeasure, PreparedProtocolDeploymentContract, ProtocolAccessPolicy, ProtocolDatasetContract, ProtocolDatasetDefaults, ProtocolDatasetDimension, ProtocolDatasetFieldSource, ProtocolDatasetFieldType, ProtocolDatasetFilter, ProtocolDatasetFreshness, ProtocolDatasetLimits, ProtocolDatasetMeasure, ProtocolDatasetMetric, ProtocolDatasetRelationship, ProtocolDatasetTenantPolicy, ProtocolSemanticMetadata, ProtocolSemanticSensitivity, ProtocolDeploymentContract, ProtocolDeploymentErrorCode, ProtocolDeploymentLimits, ProtocolDeploymentOptions, ProtocolEndpointPolicy, ProtocolEndpointTenantPolicy, ProtocolMetricDerivation, ProtocolMetricInput, } from './deployments/index.js';
 export type { ProtocolQueryImplementation, ProtocolQueryImplementationErrorCode, ProtocolQueryImplementationLimits, ProtocolQueryImplementationOptions, ProtocolSqlDialect, ProtocolSqlExpression, ProtocolSqlParameter, ProtocolSqlParameterSource, ProtocolSqlTenantPolicy, } from './query-implementations/index.js';
 export { PROTOCOL_SEMANTIC_FAILURE_MESSAGES } from './invocations/failure-messages.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,GAClC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,EACpC,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,kBAAkB,EAClB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,4CAA4C,EAC5C,gCAAgC,EAChC,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,wBAAwB,EACxB,iCAAiC,EACjC,0BAA0B,EAC1B,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,2CAA2C,EAC3C,+BAA+B,EAC/B,kCAAkC,EAClC,yCAAyC,EACzC,wCAAwC,GACzC,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,yCAAyC,EACzC,gCAAgC,EAChC,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yCAAyC,EACzC,0CAA0C,EAC1C,6BAA6B,EAC7B,sCAAsC,EACtC,8CAA8C,EAC9C,oCAAoC,EACpC,uCAAuC,EACvC,wCAAwC,GACzC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,8BAA8B,EAC9B,uCAAuC,EACvC,+CAA+C,EAC/C,qCAAqC,EACrC,wCAAwC,EACxC,yCAAyC,EACzC,uCAAuC,GACxC,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,yCAAyC,EACzC,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,wCAAwC,EACxC,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EACnC,uBAAuB,EACvB,gCAAgC,EAChC,wCAAwC,EACxC,8BAA8B,EAC9B,iCAAiC,EACjC,+BAA+B,EAC/B,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,kCAAkC,EAClC,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,2BAA2B,EAC3B,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,EAClC,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,GAClC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,EACpC,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,kBAAkB,EAClB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,4CAA4C,EAC5C,gCAAgC,EAChC,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,wBAAwB,EACxB,iCAAiC,EACjC,0BAA0B,EAC1B,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,2CAA2C,EAC3C,+BAA+B,EAC/B,kCAAkC,EAClC,yCAAyC,EACzC,wCAAwC,GACzC,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,0BAA0B,EAC1B,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,yCAAyC,EACzC,gCAAgC,EAChC,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yCAAyC,EACzC,0CAA0C,EAC1C,6BAA6B,EAC7B,sCAAsC,EACtC,8CAA8C,EAC9C,oCAAoC,EACpC,uCAAuC,EACvC,wCAAwC,GACzC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,8BAA8B,EAC9B,uCAAuC,EACvC,+CAA+C,EAC/C,qCAAqC,EACrC,wCAAwC,EACxC,yCAAyC,EACzC,uCAAuC,GACxC,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,yCAAyC,EACzC,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,wCAAwC,EACxC,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EACnC,uBAAuB,EACvB,gCAAgC,EAChC,wCAAwC,EACxC,8BAA8B,EAC9B,iCAAiC,EACjC,+BAA+B,EAC/B,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,2BAA2B,EAC3B,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,EAClC,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/query-implementations/index.d.ts

@@ -1,5 +1,6 @@
 export { ProtocolQueryImplementationError } from './errors.js';
 export { DEFAULT_PROTOCOL_QUERY_IMPLEMENTATION_LIMITS } from './limits.js';
-export { validateProtocolQueryImplementation, validateProtocolSqlExpression, } from './validate.js';
+export { validateProtocolQueryImplementation, } from './validate.js';
+export { validateProtocolSqlExpression } from '../sql-expressions/validate.js';
 export type { ProtocolQueryImplementation, ProtocolQueryImplementationErrorCode, ProtocolQueryImplementationLimits, ProtocolQueryImplementationOptions, ProtocolSqlDialect, ProtocolSqlExpression, ProtocolSqlParameter, ProtocolSqlParameterSource, ProtocolSqlTenantPolicy, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/query-implementations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/query-implementations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EACL,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,2BAA2B,EAC3B,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,EAClC,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/query-implementations/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,4CAA4C,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EACL,mCAAmC,GACpC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,YAAY,EACV,2BAA2B,EAC3B,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,EAClC,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,YAAY,CAAC"}

package/dist/query-implementations/index.js

@@ -1,3 +1,4 @@
 export { ProtocolQueryImplementationError } from './errors.js';
 export { DEFAULT_PROTOCOL_QUERY_IMPLEMENTATION_LIMITS } from './limits.js';
-export { validateProtocolQueryImplementation, validateProtocolSqlExpression, } from './validate.js';
+export { validateProtocolQueryImplementation, } from './validate.js';
+export { validateProtocolSqlExpression } from '../sql-expressions/validate.js';

package/dist/query-implementations/validate.d.ts

@@ -1,4 +1,3 @@
-import type { ProtocolQueryImplementation, ProtocolQueryImplementationOptions, ProtocolSqlExpression } from './types.js';
-export declare function validateProtocolSqlExpression(input: unknown, options?: ProtocolQueryImplementationOptions): ProtocolSqlExpression;
+import type { ProtocolQueryImplementation, ProtocolQueryImplementationOptions } from './types.js';
 export declare function validateProtocolQueryImplementation(input: unknown, options?: ProtocolQueryImplementationOptions): ProtocolQueryImplementation;
 //# sourceMappingURL=validate.d.ts.map

package/dist/query-implementations/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/query-implementations/validate.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,2BAA2B,EAE3B,kCAAkC,EAClC,qBAAqB,EAItB,MAAM,YAAY,CAAC;AAqLpB,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,kCAAuC,GAC/C,qBAAqB,CA6BvB;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,kCAAuC,GAC/C,2BAA2B,CAsD7B"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/query-implementations/validate.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,2BAA2B,EAE3B,kCAAkC,EAInC,MAAM,YAAY,CAAC;AAqLpB,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,kCAAuC,GAC/C,2BAA2B,CAsD7B"}

package/dist/query-implementations/validate.js

@@ -1,6 +1,5 @@
 import { ProtocolExpressionError, validateProtocolSemanticQuery } from '../expressions/index.js';
 import { ProtocolIdentifierError, parseProtocolIdentifier, parseProtocolQualifiedIdentifier, } from '../identifiers/index.js';
-import { ProtocolSchemaError, validateProtocolSchema } from '../schemas/index.js';
 import { queryImplementationError } from './errors.js';
 import { resolveQueryImplementationLimits } from './limits.js';
 const textEncoder = new TextEncoder();
@@ -157,38 +156,6 @@ function validateReadSources(input, path, limits) {
     }
     return Object.freeze(result);
 }
-export function validateProtocolSqlExpression(input, options = {}) {
-    const limits = resolveQueryImplementationLimits(options);
-    const value = requireRecord(input, '$');
-    exactFields(value, ['kind', 'dialect', 'sql', 'output', 'dependencies'], [], '$');
-    if (value.kind !== 'sql-expression') {
-        if (typeof value.kind !== 'string')
-            queryImplementationError('HQ_QUERY_IMPLEMENTATION_TYPE', '$.kind');
-        queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNKNOWN_KIND', '$.kind');
-    }
-    const dependencies = requireArray(value.dependencies, '$.dependencies', limits.maxCollectionItems)
-        .map((dependency, index) => identifier(dependency, `$.dependencies[${index}]`, true));
-    if (new Set(dependencies).size !== dependencies.length) {
-        queryImplementationError('HQ_QUERY_IMPLEMENTATION_INVALID_VALUE', '$.dependencies');
-    }
-    let output;
-    try {
-        output = validateProtocolSchema(value.output);
-    }
-    catch (error) {
-        if (error instanceof ProtocolSchemaError) {
-            queryImplementationError('HQ_QUERY_IMPLEMENTATION_INVALID_VALUE', '$.output');
-        }
-        throw error;
-    }
-    return freezeRecord({
-        kind: 'sql-expression',
-        dialect: dialect(value.dialect, '$.dialect'),
-        sql: boundedText(value.sql, '$.sql', limits.maxExpressionBytes, true),
-        output,
-        dependencies: Object.freeze(dependencies),
-    });
-}
 export function validateProtocolQueryImplementation(input, options = {}) {
     const limits = resolveQueryImplementationLimits(options);
     const value = requireRecord(input, '$');

package/dist/sql-expressions/validate.d.ts

@@ -0,0 +1,4 @@
+import type { ProtocolQueryImplementationOptions, ProtocolSqlExpression } from '../query-implementations/types.js';
+/** Kept under query-implementation's stable error and limit policy for v1 callers. */
+export declare function validateProtocolSqlExpression(input: unknown, options?: ProtocolQueryImplementationOptions): ProtocolSqlExpression;
+//# sourceMappingURL=validate.d.ts.map

package/dist/sql-expressions/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/sql-expressions/validate.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,kCAAkC,EAClC,qBAAqB,EACtB,MAAM,mCAAmC,CAAC;AAgF3C,sFAAsF;AACtF,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,kCAAuC,GAC/C,qBAAqB,CAgCvB"}

package/dist/sql-expressions/validate.js

@@ -0,0 +1,119 @@
+/** SQL-backed dataset fields and named-query implementations share this validator. */
+import { ProtocolIdentifierError, parseProtocolQualifiedIdentifier } from '../identifiers/index.js';
+import { ProtocolSchemaError, validateProtocolSchema } from '../schemas/index.js';
+import { queryImplementationError } from '../query-implementations/errors.js';
+import { resolveQueryImplementationLimits } from '../query-implementations/limits.js';
+const textEncoder = new TextEncoder();
+function requireRecord(input, path) {
+    if (typeof input !== 'object' || input === null || Array.isArray(input)) {
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_TYPE', path);
+    }
+    const prototype = Object.getPrototypeOf(input);
+    if (prototype !== Object.prototype && prototype !== null) {
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNSAFE_OBJECT', path);
+    }
+    if (Object.getOwnPropertySymbols(input).length > 0) {
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNSAFE_OBJECT', path);
+    }
+    for (const descriptor of Object.values(Object.getOwnPropertyDescriptors(input))) {
+        if (!descriptor.enumerable || !('value' in descriptor)) {
+            queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNSAFE_OBJECT', path);
+        }
+    }
+    return input;
+}
+function requireArray(input, path, maxItems) {
+    if (!Array.isArray(input))
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_TYPE', path);
+    if (Object.getPrototypeOf(input) !== Array.prototype || Object.getOwnPropertySymbols(input).length > 0) {
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNSAFE_OBJECT', path);
+    }
+    if (input.length > maxItems)
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_TOO_MANY_ITEMS', path);
+    const descriptors = Object.getOwnPropertyDescriptors(input);
+    for (let index = 0; index < input.length; index += 1) {
+        const descriptor = descriptors[String(index)];
+        if (!descriptor || !descriptor.enumerable || !('value' in descriptor)) {
+            queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNSAFE_OBJECT', `${path}[${index}]`);
+        }
+    }
+    if (Object.keys(input).length !== input.length) {
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNSAFE_OBJECT', path);
+    }
+    return input;
+}
+function exactFields(value, required, path) {
+    const allowed = new Set(required);
+    for (const key of Object.keys(value)) {
+        if (!allowed.has(key))
+            queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNKNOWN_FIELD', `${path}.${key}`);
+    }
+    for (const key of required) {
+        if (!Object.hasOwn(value, key))
+            queryImplementationError('HQ_QUERY_IMPLEMENTATION_TYPE', `${path}.${key}`);
+    }
+}
+function qualifiedIdentifier(value, path) {
+    try {
+        return parseProtocolQualifiedIdentifier(value);
+    }
+    catch (error) {
+        if (error instanceof ProtocolIdentifierError) {
+            queryImplementationError('HQ_QUERY_IMPLEMENTATION_INVALID_IDENTIFIER', path);
+        }
+        throw error;
+    }
+}
+function sqlText(value, path, maxBytes) {
+    if (typeof value !== 'string')
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_TYPE', path);
+    if (value.trim().length === 0)
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_INVALID_VALUE', path);
+    for (const character of value) {
+        const code = character.codePointAt(0);
+        if ((code <= 0x1f && code !== 0x09 && code !== 0x0a && code !== 0x0d)
+            || code === 0x7f || (code >= 0x80 && code <= 0x9f)) {
+            queryImplementationError('HQ_QUERY_IMPLEMENTATION_INVALID_VALUE', path);
+        }
+    }
+    if (value.length > maxBytes || textEncoder.encode(value).byteLength > maxBytes) {
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_TOO_LARGE', path);
+    }
+    return value;
+}
+/** Kept under query-implementation's stable error and limit policy for v1 callers. */
+export function validateProtocolSqlExpression(input, options = {}) {
+    const limits = resolveQueryImplementationLimits(options);
+    const value = requireRecord(input, '$');
+    exactFields(value, ['kind', 'dialect', 'sql', 'output', 'dependencies'], '$');
+    if (value.kind !== 'sql-expression') {
+        if (typeof value.kind !== 'string')
+            queryImplementationError('HQ_QUERY_IMPLEMENTATION_TYPE', '$.kind');
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_UNKNOWN_KIND', '$.kind');
+    }
+    const dependencies = requireArray(value.dependencies, '$.dependencies', limits.maxCollectionItems)
+        .map((dependency, index) => qualifiedIdentifier(dependency, `$.dependencies[${index}]`));
+    if (new Set(dependencies).size !== dependencies.length) {
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_INVALID_VALUE', '$.dependencies');
+    }
+    let output;
+    try {
+        output = validateProtocolSchema(value.output);
+    }
+    catch (error) {
+        if (error instanceof ProtocolSchemaError) {
+            queryImplementationError('HQ_QUERY_IMPLEMENTATION_INVALID_VALUE', '$.output');
+        }
+        throw error;
+    }
+    if (value.dialect !== 'clickhouse') {
+        queryImplementationError('HQ_QUERY_IMPLEMENTATION_INVALID_VALUE', '$.dialect');
+    }
+    return Object.freeze(Object.assign(Object.create(null), {
+        kind: 'sql-expression',
+        dialect: 'clickhouse',
+        sql: sqlText(value.sql, '$.sql', limits.maxExpressionBytes),
+        output,
+        dependencies: Object.freeze(dependencies),
+    }));
+}

package/dist/values/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/values/validate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAqWpB,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,qBAA0B,GAClC,cAAc,CAOhB;AAYD,kFAAkF;AAClF,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EACtC,sBAAsB,CAAC,EAAE,MAAM,GAC9B,cAAc,CAGhB;AAED,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EACtC,sBAAsB,CAAC,EAAE,MAAM,GAC9B,cAAc,CAEhB"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/values/validate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAuWpB,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,qBAA0B,GAClC,cAAc,CAOhB;AAYD,kFAAkF;AAClF,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EACtC,sBAAsB,CAAC,EAAE,MAAM,GAC9B,cAAc,CAGhB;AAED,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EACtC,sBAAsB,CAAC,EAAE,MAAM,GAC9B,cAAc,CAEhB"}

package/dist/values/validate.js

@@ -52,8 +52,10 @@ function validateUnicode(value, path, maxBytes) {
             valueError('HQ_VALUE_CONTROL_CHARACTER', path);
         }
         if (code >= 0xd800 && code <= 0xdbff) {
+            // charCodeAt past the end is NaN, which fails every range comparison,
+            // so an unpaired high surrogate at the end must be rejected explicitly.
             const low = value.charCodeAt(index + 1);
-            if (low < 0xdc00 || low > 0xdfff) {
+            if (!(low >= 0xdc00 && low <= 0xdfff)) {
                 valueError('HQ_VALUE_INVALID_UNICODE', path);
             }
             index += 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/protocol",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "description": "Portable analytics contracts and TypeScript reference implementation for Hypequery",
   "keywords": [
     "hypequery",