@hypequery/protocol 0.16.0 → 0.18.0

package/dist/cache-preimages/cache-preimages.d.ts

@@ -0,0 +1,21 @@
+import type { BuildProtocolCachePreimageOptions, ProtocolCachePreimageErrorCode } from './types.js';
+export declare class ProtocolCachePreimageError extends Error {
+    readonly code: ProtocolCachePreimageErrorCode;
+    constructor(code: ProtocolCachePreimageErrorCode);
+}
+/**
+ * The RFC 0009 tenant fingerprint: tells two tenants apart without revealing
+ * either. Keyed by a namespace secret, because tenant identifier spaces are
+ * small enough that an unkeyed digest could be reversed by enumeration.
+ */
+export declare function deriveProtocolTenantFingerprint(secret: Uint8Array, tenantId: string): string;
+/**
+ * Builds the RFC 0009 cache preimage: the canonical bytes that identify a
+ * cached semantic result. Feed them to `deriveProtocolCacheKey` (RFC 0013); never
+ * log them, emit them, or use them as a key.
+ *
+ * Checks run in the RFC's normative order, so every implementation reports the
+ * same first failure.
+ */
+export declare function buildProtocolCachePreimage(options: BuildProtocolCachePreimageOptions): string;
+//# sourceMappingURL=cache-preimages.d.ts.map

package/dist/cache-preimages/cache-preimages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-preimages.d.ts","sourceRoot":"","sources":["../../src/cache-preimages/cache-preimages.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,iCAAiC,EACjC,8BAA8B,EAC/B,MAAM,YAAY,CAAC;AAQpB,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;gBAElC,IAAI,EAAE,8BAA8B;CAOjD;AAwBD;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5F;AAoED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iCAAiC,GAAG,MAAM,CAmB7F"}

package/dist/cache-preimages/cache-preimages.js

@@ -0,0 +1,143 @@
+import { hmac } from '@noble/hashes/hmac';
+import { sha256 } from '@noble/hashes/sha2';
+import { bytesToHex } from '@noble/hashes/utils';
+import { validateProtocolSemanticQuery } from '../expressions/validate.js';
+import { serializeJcs } from '../values/jcs.js';
+const FINGERPRINT_DOMAIN = 'hypequery.tenant.fingerprint.v1';
+const MIN_SECRET_BYTES = 32;
+const DEFINITION_IDENTITY = /^[0-9a-f]{64}$/;
+const textEncoder = new TextEncoder();
+export class ProtocolCachePreimageError extends Error {
+    code;
+    constructor(code) {
+        // The code and nothing else: the secret, tenant identifiers, and filter
+        // values are all in scope wherever this is raised.
+        super(code);
+        this.name = 'ProtocolCachePreimageError';
+        this.code = code;
+    }
+}
+function fail(code) {
+    throw new ProtocolCachePreimageError(code);
+}
+function requireSecret(secret) {
+    if (!secret || secret.byteLength === 0)
+        fail('HQ_CACHE_PREIMAGE_SECRET_MISSING');
+    if (secret.byteLength < MIN_SECRET_BYTES)
+        fail('HQ_CACHE_PREIMAGE_SECRET_TOO_SHORT');
+    return secret;
+}
+function fingerprint(secret, tenantId) {
+    if (typeof tenantId !== 'string' || tenantId.length === 0) {
+        fail('HQ_CACHE_PREIMAGE_INVALID_TENANT');
+    }
+    const domain = textEncoder.encode(FINGERPRINT_DOMAIN);
+    const id = textEncoder.encode(tenantId);
+    const input = new Uint8Array(domain.byteLength + 1 + id.byteLength);
+    input.set(domain, 0);
+    input.set(id, domain.byteLength + 1);
+    return bytesToHex(hmac(sha256, secret, input));
+}
+/**
+ * The RFC 0009 tenant fingerprint: tells two tenants apart without revealing
+ * either. Keyed by a namespace secret, because tenant identifier spaces are
+ * small enough that an unkeyed digest could be reversed by enumeration.
+ */
+export function deriveProtocolTenantFingerprint(secret, tenantId) {
+    return fingerprint(requireSecret(secret), tenantId);
+}
+/** Byte order of the UTF-8 encoding, which is what the RFC sorts by. */
+function compareUtf8(left, right) {
+    const a = textEncoder.encode(left);
+    const b = textEncoder.encode(right);
+    const length = Math.min(a.byteLength, b.byteLength);
+    for (let index = 0; index < length; index += 1) {
+        const difference = a[index] - b[index];
+        if (difference !== 0)
+            return difference;
+    }
+    return a.byteLength - b.byteLength;
+}
+function normalizeQuery(source) {
+    let query;
+    try {
+        query = validateProtocolSemanticQuery(source, { extension: 2 });
+    }
+    catch {
+        // The expression code is not surfaced, so this family's set stays closed.
+        fail('HQ_CACHE_PREIMAGE_INVALID_QUERY');
+    }
+    // AND-combined, so order cannot change rows; identical filters collapse.
+    const filters = new Map();
+    for (const filter of query.filters ?? [])
+        filters.set(serializeJcs(filter), filter);
+    const normalized = {
+        kind: query.kind,
+        dataset: query.dataset,
+        dimensions: query.dimensions ?? [],
+        filters: [...filters.keys()].sort(compareUtf8).map((key) => filters.get(key)),
+        segments: [...(query.segments ?? [])].sort(compareUtf8),
+        orderBy: query.orderBy ?? [],
+        by: query.by ?? null,
+        offset: query.offset || null,
+    };
+    if (query.kind === 'metric') {
+        normalized.metric = query.metric;
+    }
+    else {
+        // Absent selects every measure and `[]` selects none, so they stay distinct.
+        normalized.measures = query.measures ?? null;
+    }
+    return normalized;
+}
+function normalizeTenant(tenant, secret) {
+    if (tenant === null || typeof tenant !== 'object' || Array.isArray(tenant)) {
+        fail('HQ_CACHE_PREIMAGE_INVALID_TENANT');
+    }
+    const record = tenant;
+    const fields = Object.keys(record).sort().join(',');
+    if ((record.mode === 'none' || record.mode === 'all') && fields === 'mode') {
+        return { mode: record.mode };
+    }
+    if (record.mode !== 'scoped' || fields !== 'ids,mode')
+        fail('HQ_CACHE_PREIMAGE_INVALID_TENANT');
+    const ids = record.ids;
+    if (!Array.isArray(ids) || ids.length === 0)
+        fail('HQ_CACHE_PREIMAGE_INVALID_TENANT');
+    const fingerprints = new Set(ids.map((id) => fingerprint(secret, id)));
+    return { mode: 'scoped', fingerprints: [...fingerprints].sort() };
+}
+function normalizeRowLimit(rowLimit) {
+    if (rowLimit === null)
+        return null;
+    if (typeof rowLimit !== 'number' || !Number.isSafeInteger(rowLimit) || rowLimit < 0) {
+        fail('HQ_CACHE_PREIMAGE_INVALID_LIMIT');
+    }
+    return rowLimit;
+}
+/**
+ * Builds the RFC 0009 cache preimage: the canonical bytes that identify a
+ * cached semantic result. Feed them to `deriveProtocolCacheKey` (RFC 0013); never
+ * log them, emit them, or use them as a key.
+ *
+ * Checks run in the RFC's normative order, so every implementation reports the
+ * same first failure.
+ */
+export function buildProtocolCachePreimage(options) {
+    const secret = requireSecret(options.secret);
+    if (typeof options.definitionIdentity !== 'string'
+        || !DEFINITION_IDENTITY.test(options.definitionIdentity)) {
+        fail('HQ_CACHE_PREIMAGE_INVALID_DEFINITION');
+    }
+    const query = normalizeQuery(options.query);
+    const tenant = normalizeTenant(options.tenant, secret);
+    const rowLimit = normalizeRowLimit(options.rowLimit);
+    return serializeJcs({
+        kind: 'hypequery-cache-preimage',
+        version: 1,
+        definition: options.definitionIdentity,
+        query,
+        tenant,
+        rowLimit,
+    });
+}

package/dist/cache-preimages/index.d.ts

@@ -0,0 +1,3 @@
+export { ProtocolCachePreimageError, buildProtocolCachePreimage, deriveProtocolTenantFingerprint, } from './cache-preimages.js';
+export type { BuildProtocolCachePreimageOptions, ProtocolCachePreimageErrorCode, ProtocolCacheTenantScope, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cache-preimages/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cache-preimages/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,iCAAiC,EACjC,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,YAAY,CAAC"}

package/dist/cache-preimages/index.js

@@ -0,0 +1 @@
+export { ProtocolCachePreimageError, buildProtocolCachePreimage, deriveProtocolTenantFingerprint, } from './cache-preimages.js';

package/dist/cache-preimages/types.d.ts

@@ -0,0 +1,29 @@
+/** Stable failure codes for cache preimage version 1 (RFC 0009). */
+export type ProtocolCachePreimageErrorCode = 'HQ_CACHE_PREIMAGE_SECRET_MISSING' | 'HQ_CACHE_PREIMAGE_SECRET_TOO_SHORT' | 'HQ_CACHE_PREIMAGE_INVALID_DEFINITION' | 'HQ_CACHE_PREIMAGE_INVALID_QUERY' | 'HQ_CACHE_PREIMAGE_INVALID_TENANT' | 'HQ_CACHE_PREIMAGE_INVALID_LIMIT';
+/**
+ * The tenant scope an execution runs under, as resolved server-side.
+ *
+ * `all` is a trusted execution the runtime itself scopes to every tenant. It
+ * is never reachable from a request and is not the cross-tenant administrative
+ * capability, which never touches the data plane.
+ */
+export type ProtocolCacheTenantScope = {
+    readonly mode: 'none';
+} | {
+    readonly mode: 'scoped';
+    readonly ids: readonly string[];
+} | {
+    readonly mode: 'all';
+};
+export interface BuildProtocolCachePreimageOptions {
+    /** The namespace's RFC 0013 cache-key secret; keys tenant fingerprints. */
+    readonly secret: Uint8Array;
+    /** 64 lowercase hex characters; the RFC 0007 bundle identity when released. */
+    readonly definitionIdentity: string;
+    /** An RFC 0003 semantic query, validated under expression extension 2. */
+    readonly query: unknown;
+    readonly tenant: ProtocolCacheTenantScope;
+    /** The effective maximum row count, or `null` when none applies. */
+    readonly rowLimit: number | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cache-preimages/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cache-preimages/types.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,MAAM,MAAM,8BAA8B,GACtC,kCAAkC,GAClC,oCAAoC,GACpC,sCAAsC,GACtC,iCAAiC,GACjC,kCAAkC,GAClC,iCAAiC,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC;AAE7B,MAAM,WAAW,iCAAiC;IAChD,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC"}

package/dist/cache-preimages/types.js

@@ -0,0 +1 @@
+export {};

package/dist/events/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/events/validate.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,wBAAwB,EAExB,kBAAkB,EAElB,yBAAyB,EAE1B,MAAM,YAAY,CAAC;AA4OpB,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CAuDpB;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,wBAAwB,CA+B1B"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/events/validate.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,wBAAwB,EAExB,kBAAkB,EAElB,yBAAyB,EAE1B,MAAM,YAAY,CAAC;AAuRpB,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CAiDpB;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAA8B,GACtC,wBAAwB,CAiC1B"}

package/dist/events/validate.js

@@ -25,7 +25,7 @@ const DIAGNOSTICS_CONTEXT = {
     fail: diagnosticsError,
 };
 const HEX64_PATTERN = /^[0-9a-f]{64}$/;
-const OCCURRED_AT_PATTERN = /^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\.[0-9]{1,3})?Z$/;
+const OCCURRED_AT_PATTERN = /^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-9]{2})(?:\.[0-9]{3})?Z$/;
 const OPERATIONS = ['query', 'command', 'insert'];
 const OUTCOMES = ['success', 'failure'];
 const ERROR_CATEGORIES = [
@@ -84,20 +84,37 @@ function requireString(context, value, path) {
         context.fail(context.codes.type, path);
     return value;
 }
-function hasControlCharacter(text) {
+// The compiler's debug form spans lines, so debugQuery alone may carry tab,
+// line feed, and carriage return.
+const LINE_BREAK_CHARACTERS = new Set([0x09, 0x0a, 0x0d]);
+// Rejects C0 controls, DEL, the C1 range, and unpaired surrogates, which have
+// no UTF-8 encoding and so no canonical bytes.
+function hasForbiddenCodeUnit(text, allowLineBreaks) {
     for (let index = 0; index < text.length; index += 1) {
         const code = text.charCodeAt(index);
+        if (code <= 0x1f && allowLineBreaks && LINE_BREAK_CHARACTERS.has(code))
+            continue;
         if (code <= 0x1f || (code >= 0x7f && code <= 0x9f))
             return true;
+        if (code >= 0xd800 && code <= 0xdbff) {
+            // charCodeAt past the end is NaN, which fails the range check.
+            const low = text.charCodeAt(index + 1);
+            if (!(low >= 0xdc00 && low <= 0xdfff))
+                return true;
+            index += 1;
+        }
+        else if (code >= 0xdc00 && code <= 0xdfff) {
+            return true;
+        }
     }
     return false;
 }
-function boundedText(context, value, path, maximum) {
+function boundedText(context, value, path, maximum, allowLineBreaks = false) {
     const text = requireString(context, value, path);
     if (text.length > maximum || textEncoder.encode(text).byteLength > maximum) {
         context.fail(context.codes.tooLarge, path);
     }
-    if (hasControlCharacter(text)) {
+    if (hasForbiddenCodeUnit(text, allowLineBreaks)) {
         context.fail(context.codes.invalidValue, path);
     }
     return text;
@@ -110,7 +127,21 @@ function hexIdentity(context, value, path) {
 }
 function occurredAt(context, value, path) {
     const text = requireString(context, value, path);
-    if (!OCCURRED_AT_PATTERN.test(text) || Number.isNaN(Date.parse(text))) {
+    const match = OCCURRED_AT_PATTERN.exec(text);
+    if (!match)
+        context.fail(context.codes.invalidValue, path);
+    const [year, month, day, hour, minute, second] = match.slice(1).map(Number);
+    // Round-trip through Date so impossible dates (2026-02-30) and 24:00 fail
+    // rather than rolling over. setUTCFullYear avoids Date.UTC's 0-99 remap.
+    const date = new Date(0);
+    date.setUTCFullYear(year, month - 1, day);
+    date.setUTCHours(hour, minute, second, 0);
+    if (date.getUTCFullYear() !== year
+        || date.getUTCMonth() !== month - 1
+        || date.getUTCDate() !== day
+        || date.getUTCHours() !== hour
+        || date.getUTCMinutes() !== minute
+        || date.getUTCSeconds() !== second) {
         context.fail(context.codes.invalidValue, path);
     }
     return text;
@@ -166,10 +197,18 @@ function kindAndVersion(context, value, kind) {
         fail(codes.invalidVersion, '$.version');
     }
 }
+function outcomeWithCategory(context, value, hasCategory) {
+    const outcome = stringChoice(context, value.outcome, '$.outcome', OUTCOMES);
+    if ((outcome === 'failure') !== hasCategory) {
+        context.fail(context.codes.invalidValue, '$.errorCategory');
+    }
+    return outcome;
+}
 export function validateProtocolQueryEvent(input, options = {}) {
     const limits = resolveQueryEventLimits(options);
     const context = EVENT_CONTEXT;
     const value = requireRecord(context, input, '$');
+    kindAndVersion(context, value, 'hypequery-query-event');
     exactFields(context, value, [
         'kind',
         'version',
@@ -181,15 +220,8 @@ export function validateProtocolQueryEvent(input, options = {}) {
         'outcome',
         'durationMs',
     ], ['errorCategory', 'rowCount', 'tenantFingerprint', 'correlationId'], '$');
-    kindAndVersion(context, value, 'hypequery-query-event');
-    const outcome = stringChoice(context, value.outcome, '$.outcome', OUTCOMES);
     const hasCategory = Object.hasOwn(value, 'errorCategory');
-    if (outcome === 'failure' && !hasCategory) {
-        eventError('HQ_EVENT_INVALID_VALUE', '$.errorCategory');
-    }
-    if (outcome === 'success' && hasCategory) {
-        eventError('HQ_EVENT_INVALID_VALUE', '$.errorCategory');
-    }
+    // Object literal entries evaluate in order, so fields are checked in RFC order.
     return freezeRecord({
         kind: 'hypequery-query-event',
         version: 1,
@@ -198,7 +230,7 @@ export function validateProtocolQueryEvent(input, options = {}) {
         target: queryTarget(context, value.target, '$.target'),
         queryName: queryName(context, value.queryName, '$.queryName'),
         operation: stringChoice(context, value.operation, '$.operation', OPERATIONS),
-        outcome,
+        outcome: outcomeWithCategory(context, value, hasCategory),
         ...(hasCategory ? {
             errorCategory: stringChoice(context, value.errorCategory, '$.errorCategory', ERROR_CATEGORIES),
         } : {}),
@@ -218,8 +250,8 @@ export function validateProtocolQueryDiagnostics(input, options = {}) {
     const limits = resolveQueryEventLimits(options);
     const context = DIAGNOSTICS_CONTEXT;
     const value = requireRecord(context, input, '$');
-    exactFields(context, value, ['kind', 'version', 'eventId', 'queryId', 'terminalReason', 'attempts'], ['runtimeIdentity', 'debugQuery', 'safeMessage'], '$');
     kindAndVersion(context, value, 'hypequery-query-diagnostics');
+    exactFields(context, value, ['kind', 'version', 'eventId', 'queryId', 'terminalReason', 'attempts'], ['runtimeIdentity', 'debugQuery', 'safeMessage'], '$');
     return freezeRecord({
         kind: 'hypequery-query-diagnostics',
         version: 1,
@@ -231,7 +263,7 @@ export function validateProtocolQueryDiagnostics(input, options = {}) {
             runtimeIdentity: hexIdentity(context, value.runtimeIdentity, '$.runtimeIdentity'),
         } : {}),
         ...(Object.hasOwn(value, 'debugQuery') ? {
-            debugQuery: boundedText(context, value.debugQuery, '$.debugQuery', limits.maxDebugBytes),
+            debugQuery: boundedText(context, value.debugQuery, '$.debugQuery', limits.maxDebugBytes, true),
         } : {}),
         ...(Object.hasOwn(value, 'safeMessage') ? {
             safeMessage: boundedText(context, value.safeMessage, '$.safeMessage', limits.maxStringBytes),

package/dist/index.d.ts

@@ -2,11 +2,13 @@ export { DEFAULT_CANONICAL_VALUE_LIMITS, ProtocolValueError, decodeCanonicalValu
 export type { ArrayTaggedValue, BytesTaggedValue, CanonicalValue, CanonicalValueLimits, CanonicalValueOptions, DateTaggedValue, DatetimeTaggedValue, DecimalTaggedValue, EnumTaggedValue, IntegerTaggedValue, MapTaggedValue, ProtocolValueErrorCode, TaggedValue, TupleTaggedValue, UuidTaggedValue, } from './values/index.js';
 export { PROTOCOL_IDENTIFIER_LIMITS, ProtocolIdentifierError, isProtocolIdentifier, isProtocolQualifiedIdentifier, joinProtocolQualifiedIdentifier, parseProtocolIdentifier, parseProtocolQualifiedIdentifier, splitProtocolQualifiedIdentifier, } from './identifiers/index.js';
 export { PROTOCOL_CACHE_KEY_LIMITS, ProtocolCacheKeyError, deriveProtocolCacheKey, deriveProtocolCacheNamespaceToken, } from './cache-keys/index.js';
+export { ProtocolCachePreimageError, buildProtocolCachePreimage, deriveProtocolTenantFingerprint, } from './cache-preimages/index.js';
 export { DEFAULT_PROTOCOL_EXPRESSION_LIMITS, ProtocolExpressionError, validateProtocolExpression, validateProtocolSemanticQuery, } from './expressions/index.js';
 export { DEFAULT_PROTOCOL_SCHEMA_LIMITS, DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS, ProtocolSchemaError, ProtocolSchemaValueError, applyProtocolSchemaValue, createProtocolSchemaValueParser, resolveProtocolSchemaValueLimits, validateProtocolSchema, } from './schemas/index.js';
 export type { ProtocolSchema, ProtocolSchemaErrorCode, ProtocolSchemaLimits, ProtocolSchemaOptions, ProtocolSchemaValueLimits, ProtocolSchemaValueOptions, ProtocolSchemaValueParser, } from './schemas/index.js';
 export type { ProtocolAggregation, ProtocolBinaryOperator, ProtocolComparisonOperator, ProtocolDatasetQuery, ProtocolExpression, ProtocolExpressionErrorCode, ProtocolExpressionExtension, ProtocolExpressionLimits, ProtocolExpressionOptions, ProtocolFunctionName, ProtocolMetricQuery, ProtocolOrderBy, ProtocolSemanticQuery, ProtocolQueryTimeGrain, ProtocolTimeGrain, } from './expressions/index.js';
 export type { DeriveProtocolCacheKeyOptions, ProtocolCacheKeyErrorCode, ProtocolCacheKeyNamespace, } from './cache-keys/index.js';
+export type { BuildProtocolCachePreimageOptions, ProtocolCachePreimageErrorCode, ProtocolCacheTenantScope, } from './cache-preimages/index.js';
 export type { ProtocolIdentifier, ProtocolIdentifierErrorCode, ProtocolQualifiedIdentifier, } from './identifiers/index.js';
 export { DEFAULT_PROTOCOL_QUERY_IMPLEMENTATION_LIMITS, ProtocolQueryImplementationError, validateProtocolQueryImplementation, validateProtocolSqlExpression, } from './query-implementations/index.js';
 export { DEFAULT_PROTOCOL_QUERY_EVENT_LIMITS, ProtocolQueryDiagnosticsError, ProtocolQueryEventError, validateProtocolQueryDiagnostics, validateProtocolQueryEvent, } from './events/index.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,GAClC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,EACpC,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,kBAAkB,EAClB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,4CAA4C,EAC5C,gCAAgC,EAChC,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,wBAAwB,EACxB,iCAAiC,EACjC,0BAA0B,EAC1B,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,2CAA2C,EAC3C,+BAA+B,EAC/B,kCAAkC,EAClC,yCAAyC,EACzC,wCAAwC,EACxC,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,0BAA0B,EAC1B,4BAA4B,EAC5B,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,yCAAyC,EACzC,gCAAgC,EAChC,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yCAAyC,EACzC,0CAA0C,EAC1C,6BAA6B,EAC7B,sCAAsC,EACtC,8CAA8C,EAC9C,oCAAoC,EACpC,uCAAuC,EACvC,wCAAwC,GACzC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,8BAA8B,EAC9B,uCAAuC,EACvC,+CAA+C,EAC/C,qCAAqC,EACrC,wCAAwC,EACxC,yCAAyC,EACzC,uCAAuC,GACxC,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,yCAAyC,EACzC,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,wCAAwC,EACxC,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EACnC,sCAAsC,EACtC,uBAAuB,EACvB,gCAAgC,EAChC,wCAAwC,EACxC,8BAA8B,EAC9B,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,EAC/B,kCAAkC,EAClC,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,oCAAoC,EACpC,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,2BAA2B,EAC3B,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,EAClC,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,WAAW,EACX,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B,EAC/B,uBAAuB,EACvB,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,iCAAiC,GAClC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,kCAAkC,EAClC,uBAAuB,EACvB,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,8BAA8B,EAC9B,oCAAoC,EACpC,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,iCAAiC,EACjC,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EACV,kBAAkB,EAClB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,4CAA4C,EAC5C,gCAAgC,EAChC,mCAAmC,EACnC,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACL,mCAAmC,EACnC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,wBAAwB,EACxB,iCAAiC,EACjC,0BAA0B,EAC1B,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,2CAA2C,EAC3C,+BAA+B,EAC/B,kCAAkC,EAClC,yCAAyC,EACzC,wCAAwC,EACxC,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,0BAA0B,EAC1B,4BAA4B,EAC5B,gCAAgC,EAChC,mCAAmC,EACnC,iCAAiC,EACjC,yCAAyC,EACzC,gCAAgC,EAChC,8BAA8B,EAC9B,iCAAiC,EACjC,oCAAoC,EACpC,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,yCAAyC,EACzC,0CAA0C,EAC1C,6BAA6B,EAC7B,sCAAsC,EACtC,8CAA8C,EAC9C,oCAAoC,EACpC,uCAAuC,EACvC,wCAAwC,GACzC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,8BAA8B,EAC9B,uCAAuC,EACvC,+CAA+C,EAC/C,qCAAqC,EACrC,wCAAwC,EACxC,yCAAyC,EACzC,uCAAuC,GACxC,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,yCAAyC,EACzC,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,wCAAwC,EACxC,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EACnC,sCAAsC,EACtC,uBAAuB,EACvB,gCAAgC,EAChC,wCAAwC,EACxC,8BAA8B,EAC9B,iCAAiC,EACjC,mCAAmC,EACnC,+BAA+B,EAC/B,kCAAkC,EAClC,oCAAoC,GACrC,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,kCAAkC,EAClC,oCAAoC,EACpC,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,2BAA2B,EAC3B,oCAAoC,EACpC,iCAAiC,EACjC,kCAAkC,EAClC,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,kCAAkC,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/index.js

@@ -1,6 +1,7 @@
 export { DEFAULT_CANONICAL_VALUE_LIMITS, ProtocolValueError, decodeCanonicalValue, encodeCanonicalValue, encodeCanonicalValueToString, hashCanonicalValue, validateCanonicalValue, } from './values/index.js';
 export { PROTOCOL_IDENTIFIER_LIMITS, ProtocolIdentifierError, isProtocolIdentifier, isProtocolQualifiedIdentifier, joinProtocolQualifiedIdentifier, parseProtocolIdentifier, parseProtocolQualifiedIdentifier, splitProtocolQualifiedIdentifier, } from './identifiers/index.js';
 export { PROTOCOL_CACHE_KEY_LIMITS, ProtocolCacheKeyError, deriveProtocolCacheKey, deriveProtocolCacheNamespaceToken, } from './cache-keys/index.js';
+export { ProtocolCachePreimageError, buildProtocolCachePreimage, deriveProtocolTenantFingerprint, } from './cache-preimages/index.js';
 export { DEFAULT_PROTOCOL_EXPRESSION_LIMITS, ProtocolExpressionError, validateProtocolExpression, validateProtocolSemanticQuery, } from './expressions/index.js';
 export { DEFAULT_PROTOCOL_SCHEMA_LIMITS, DEFAULT_PROTOCOL_SCHEMA_VALUE_LIMITS, ProtocolSchemaError, ProtocolSchemaValueError, applyProtocolSchemaValue, createProtocolSchemaValueParser, resolveProtocolSchemaValueLimits, validateProtocolSchema, } from './schemas/index.js';
 export { DEFAULT_PROTOCOL_QUERY_IMPLEMENTATION_LIMITS, ProtocolQueryImplementationError, validateProtocolQueryImplementation, validateProtocolSqlExpression, } from './query-implementations/index.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hypequery/protocol",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "Portable analytics contracts and TypeScript reference implementation for Hypequery",
   "keywords": [
     "hypequery",
@@ -31,7 +31,7 @@
   },
   "devDependencies": {
     "typescript": "^5.7.3",
-    "vitest": "^3.2.6"
+    "vitest": "^5.0.2"
   },
   "repository": {
     "type": "git",
@@ -48,7 +48,7 @@
   "scripts": {
     "build": "tsc --project tsconfig.json",
     "dev": "tsc --project tsconfig.json --watch",
-    "lint": "eslint --ext .ts \"src/**/*.ts\"",
+    "lint": "eslint \"src/**/*.ts\"",
     "test": "vitest run",
     "types": "tsc --project tsconfig.json --noEmit && tsc --project tsconfig.test.json"
   }