@sequenceholdings/orm 2.1.0 → 2.2.0

package/dist/client.d.cts

@@ -1,8 +1,23 @@
+export { N as NAMESPACE_PATTERN, O as ORM_DATA_TOKEN_HEADER, d as ORM_SERVICE_DATA_TOKEN_HEADER } from './constants-C6EG6Wq7.cjs';
+
 declare class OrmClientError extends Error {
     readonly status: number | null;
     readonly name: string;
     constructor(message: string, status?: number | null);
 }
+interface OperationErrorEntry {
+    readonly message: string;
+    readonly extensions?: {
+        readonly code?: string;
+    };
+}
+declare class OrmOperationError extends OrmClientError {
+    readonly code: string | null;
+    readonly errors: readonly OperationErrorEntry[];
+    readonly name = "OrmOperationError";
+    constructor(message: string, status: number | null, code: string | null, errors?: readonly OperationErrorEntry[]);
+}
+
 interface OrmTransport {
     get(path: string, params: URLSearchParams): Promise<unknown>;
     post(path: string, body: unknown): Promise<unknown>;
@@ -71,14 +86,6 @@ declare class TableQuery<Row extends Record<string, unknown>, Result = Row> {
     private filter;
 }
 
-/**
- * Persisted-operation client for the v2 data plane. The wire carries only
- * `{ op: <hash>, variables }` — never GraphQL text, never SQL. Like the rest
- * of `./client`, this module is deliberately free of node builtins and third-
- * party deps (no @apollo/client import): Apollo integration happens through a
- * fetch-compatible shim (`createOrmFetch`) handed to `HttpLink({ fetch })`.
- */
-
 /** One entry of `operations.manifest.json` (generated by `orm generate`). */
 interface ManifestOperation {
     readonly hash: string;
@@ -93,19 +100,6 @@ interface OperationsManifest {
     readonly opsHash?: string;
     readonly operations: Readonly<Record<string, ManifestOperation>>;
 }
-/** GraphQL-spec error envelope the data plane returns. */
-interface OperationErrorEntry {
-    readonly message: string;
-    readonly extensions?: {
-        readonly code?: string;
-    };
-}
-declare class OrmOperationError extends OrmClientError {
-    readonly code: string | null;
-    readonly errors: readonly OperationErrorEntry[];
-    readonly name = "OrmOperationError";
-    constructor(message: string, status: number | null, code: string | null, errors?: readonly OperationErrorEntry[]);
-}
 interface OperationExecutorConfig {
     /** Deployment host root, e.g. `https://atlas.seqholdings.com`. */
     baseUrl: string;
@@ -117,11 +111,27 @@ interface OperationExecutorConfig {
     getDataToken?: () => Promise<string | null> | string | null;
     fetchImpl?: typeof globalThis.fetch;
 }
+interface OperationExecutionOptions {
+    /** Reuse only when retrying the same logical mutation. */
+    idempotencyKey?: string;
+}
 interface OperationExecutor {
     /** Execute a manifest operation by name (or a raw `sha256:` hash). */
-    execute<TData = Record<string, unknown>>(op: string, variables?: Record<string, unknown>): Promise<TData>;
+    execute<TData = Record<string, unknown>>(op: string, variables?: Record<string, unknown>, options?: OperationExecutionOptions): Promise<TData>;
+}
+/** Additive factory result; existing host wrappers implementing OperationExecutor remain valid. */
+interface TypedOperationExecutor extends OperationExecutor {
+    execute<TVariables extends Record<string, unknown>, TData>(op: OperationReference<TVariables, TData>, variables: TVariables, options?: OperationExecutionOptions): Promise<TData>;
+    execute<TData = Record<string, unknown>>(op: string, variables?: Record<string, unknown>, options?: OperationExecutionOptions): Promise<TData>;
+}
+/** Generated handle identifies the registered contract; optional types are phantom. */
+interface OperationReference<TVariables extends Record<string, unknown>, TData> {
+    readonly namespace: string;
+    readonly hash: string;
+    readonly variables?: TVariables;
+    readonly result?: TData;
 }
-declare function createOperationExecutor({ baseUrl, namespace, manifest, getToken, getDataToken, fetchImpl, }: OperationExecutorConfig): OperationExecutor;
+declare function createOperationExecutor({ baseUrl, namespace, manifest, getToken, getDataToken, fetchImpl, }: OperationExecutorConfig): TypedOperationExecutor;
 /**
  * Configure the process-wide executor the generated `db<Name>` server
  * functions call through. Call once at startup (server-side); browser apps
@@ -129,9 +139,10 @@ declare function createOperationExecutor({ baseUrl, namespace, manifest, getToke
  */
 declare function configureOrmOperations(config: OperationExecutorConfig): OperationExecutor;
 /** Used by generated code: `executeOperation({ op: 'getOpenDeals', variables })`. */
-declare function executeOperation<TData = Record<string, unknown>>({ op, variables, }: {
+declare function executeOperation<TData = Record<string, unknown>>({ op, variables, idempotencyKey, }: {
     op: string;
     variables?: Record<string, unknown>;
+    idempotencyKey?: string;
 }): Promise<TData>;
 /**
  * A fetch-compatible function for `new HttpLink({ uri: '/unused', fetch: createOrmFetch(...) })`.
@@ -143,6 +154,55 @@ declare function executeOperation<TData = Record<string, unknown>>({ op, variabl
  */
 declare function createOrmFetch({ baseUrl, namespace, manifest, getToken, getDataToken, fetchImpl, }: OperationExecutorConfig): typeof globalThis.fetch;
 
+/** Runtime SQL inputs are values, never interpolated into the submitted SQL. */
+type SqlQueryParameter = {
+    type: 'text' | 'uuid' | 'date' | 'timestamptz' | 'numeric' | 'bigint';
+    value: string | null;
+} | {
+    type: 'integer' | 'double';
+    value: number | null;
+} | {
+    type: 'boolean';
+    value: boolean | null;
+};
+type SqlQueryVariables = {
+    sql: string;
+    parameters?: Record<string, SqlQueryParameter>;
+};
+interface SqlQueryResult {
+    columns: Array<{
+        name: string;
+        type: string;
+        nullable: boolean;
+    }>;
+    rows: Array<Array<string | number | boolean | null>>;
+    truncated: boolean;
+}
+
+interface OperationTransportRequest {
+    namespace: string;
+    op: string;
+    variables: Record<string, unknown>;
+    idempotencyKey?: string;
+}
+interface OperationTransportResponse {
+    ok: boolean;
+    status: number;
+    body: unknown;
+}
+type OperationTransport = (request: OperationTransportRequest) => Promise<OperationTransportResponse>;
+/**
+ * Execute generated operations through a host-owned authenticated transport.
+ * No credential handling, retries, or global configuration. The manifest is
+ * validated once and copied, so later caller mutation cannot alter the target.
+ */
+declare function createOperationExecutorWithTransport({ namespace, manifest, transport }: {
+    namespace: string;
+    /** Accept generated JSON imports directly; validate them at construction. */
+    manifest: unknown;
+    transport: OperationTransport;
+}): TypedOperationExecutor;
+
 /** Bindable scalar for `query()` placeholders ($1, $2, …). */
 type QueryParam = string | number | boolean | null;
 /** Shape of one action in the generated `<Ns>Actions` map — params in, result out. */
@@ -240,4 +300,4 @@ declare function createServiceOrmClient<Tables extends Record<string, Record<str
     transport?: OrmTransport;
 }): OrmClient<Tables, Actions>;
 
-export { type FilterValue, type ManifestOperation, type OperationErrorEntry, type OperationExecutor, type OperationExecutorConfig, type OperationsManifest, type OrmActionShape, type OrmActions, type OrmClient, OrmClientError, OrmOperationError, type OrmTransport, type QueryParam, type ReadResponse, TableQuery, configureOrmOperations, createFetchTransport, createOperationExecutor, createOrmClient, createOrmFetch, createServiceOrmClient, executeOperation };
+export { type FilterValue, type ManifestOperation, type OperationErrorEntry, type OperationExecutor, type OperationExecutorConfig, type OperationReference, type OperationTransport, type OperationTransportRequest, type OperationTransportResponse, type OperationsManifest, type OrmActionShape, type OrmActions, type OrmClient, OrmClientError, OrmOperationError, type OrmTransport, type QueryParam, type ReadResponse, type SqlQueryParameter, type SqlQueryResult, type SqlQueryVariables, TableQuery, type TypedOperationExecutor, configureOrmOperations, createFetchTransport, createOperationExecutor, createOperationExecutorWithTransport, createOrmClient, createOrmFetch, createServiceOrmClient, executeOperation };

package/dist/client.d.ts

@@ -1,8 +1,23 @@
+export { N as NAMESPACE_PATTERN, O as ORM_DATA_TOKEN_HEADER, d as ORM_SERVICE_DATA_TOKEN_HEADER } from './constants-C6EG6Wq7.js';
+
 declare class OrmClientError extends Error {
     readonly status: number | null;
     readonly name: string;
     constructor(message: string, status?: number | null);
 }
+interface OperationErrorEntry {
+    readonly message: string;
+    readonly extensions?: {
+        readonly code?: string;
+    };
+}
+declare class OrmOperationError extends OrmClientError {
+    readonly code: string | null;
+    readonly errors: readonly OperationErrorEntry[];
+    readonly name = "OrmOperationError";
+    constructor(message: string, status: number | null, code: string | null, errors?: readonly OperationErrorEntry[]);
+}
+
 interface OrmTransport {
     get(path: string, params: URLSearchParams): Promise<unknown>;
     post(path: string, body: unknown): Promise<unknown>;
@@ -71,14 +86,6 @@ declare class TableQuery<Row extends Record<string, unknown>, Result = Row> {
     private filter;
 }
 
-/**
- * Persisted-operation client for the v2 data plane. The wire carries only
- * `{ op: <hash>, variables }` — never GraphQL text, never SQL. Like the rest
- * of `./client`, this module is deliberately free of node builtins and third-
- * party deps (no @apollo/client import): Apollo integration happens through a
- * fetch-compatible shim (`createOrmFetch`) handed to `HttpLink({ fetch })`.
- */
-
 /** One entry of `operations.manifest.json` (generated by `orm generate`). */
 interface ManifestOperation {
     readonly hash: string;
@@ -93,19 +100,6 @@ interface OperationsManifest {
     readonly opsHash?: string;
     readonly operations: Readonly<Record<string, ManifestOperation>>;
 }
-/** GraphQL-spec error envelope the data plane returns. */
-interface OperationErrorEntry {
-    readonly message: string;
-    readonly extensions?: {
-        readonly code?: string;
-    };
-}
-declare class OrmOperationError extends OrmClientError {
-    readonly code: string | null;
-    readonly errors: readonly OperationErrorEntry[];
-    readonly name = "OrmOperationError";
-    constructor(message: string, status: number | null, code: string | null, errors?: readonly OperationErrorEntry[]);
-}
 interface OperationExecutorConfig {
     /** Deployment host root, e.g. `https://atlas.seqholdings.com`. */
     baseUrl: string;
@@ -117,11 +111,27 @@ interface OperationExecutorConfig {
     getDataToken?: () => Promise<string | null> | string | null;
     fetchImpl?: typeof globalThis.fetch;
 }
+interface OperationExecutionOptions {
+    /** Reuse only when retrying the same logical mutation. */
+    idempotencyKey?: string;
+}
 interface OperationExecutor {
     /** Execute a manifest operation by name (or a raw `sha256:` hash). */
-    execute<TData = Record<string, unknown>>(op: string, variables?: Record<string, unknown>): Promise<TData>;
+    execute<TData = Record<string, unknown>>(op: string, variables?: Record<string, unknown>, options?: OperationExecutionOptions): Promise<TData>;
+}
+/** Additive factory result; existing host wrappers implementing OperationExecutor remain valid. */
+interface TypedOperationExecutor extends OperationExecutor {
+    execute<TVariables extends Record<string, unknown>, TData>(op: OperationReference<TVariables, TData>, variables: TVariables, options?: OperationExecutionOptions): Promise<TData>;
+    execute<TData = Record<string, unknown>>(op: string, variables?: Record<string, unknown>, options?: OperationExecutionOptions): Promise<TData>;
+}
+/** Generated handle identifies the registered contract; optional types are phantom. */
+interface OperationReference<TVariables extends Record<string, unknown>, TData> {
+    readonly namespace: string;
+    readonly hash: string;
+    readonly variables?: TVariables;
+    readonly result?: TData;
 }
-declare function createOperationExecutor({ baseUrl, namespace, manifest, getToken, getDataToken, fetchImpl, }: OperationExecutorConfig): OperationExecutor;
+declare function createOperationExecutor({ baseUrl, namespace, manifest, getToken, getDataToken, fetchImpl, }: OperationExecutorConfig): TypedOperationExecutor;
 /**
  * Configure the process-wide executor the generated `db<Name>` server
  * functions call through. Call once at startup (server-side); browser apps
@@ -129,9 +139,10 @@ declare function createOperationExecutor({ baseUrl, namespace, manifest, getToke
  */
 declare function configureOrmOperations(config: OperationExecutorConfig): OperationExecutor;
 /** Used by generated code: `executeOperation({ op: 'getOpenDeals', variables })`. */
-declare function executeOperation<TData = Record<string, unknown>>({ op, variables, }: {
+declare function executeOperation<TData = Record<string, unknown>>({ op, variables, idempotencyKey, }: {
     op: string;
     variables?: Record<string, unknown>;
+    idempotencyKey?: string;
 }): Promise<TData>;
 /**
  * A fetch-compatible function for `new HttpLink({ uri: '/unused', fetch: createOrmFetch(...) })`.
@@ -143,6 +154,55 @@ declare function executeOperation<TData = Record<string, unknown>>({ op, variabl
  */
 declare function createOrmFetch({ baseUrl, namespace, manifest, getToken, getDataToken, fetchImpl, }: OperationExecutorConfig): typeof globalThis.fetch;
 
+/** Runtime SQL inputs are values, never interpolated into the submitted SQL. */
+type SqlQueryParameter = {
+    type: 'text' | 'uuid' | 'date' | 'timestamptz' | 'numeric' | 'bigint';
+    value: string | null;
+} | {
+    type: 'integer' | 'double';
+    value: number | null;
+} | {
+    type: 'boolean';
+    value: boolean | null;
+};
+type SqlQueryVariables = {
+    sql: string;
+    parameters?: Record<string, SqlQueryParameter>;
+};
+interface SqlQueryResult {
+    columns: Array<{
+        name: string;
+        type: string;
+        nullable: boolean;
+    }>;
+    rows: Array<Array<string | number | boolean | null>>;
+    truncated: boolean;
+}
+
+interface OperationTransportRequest {
+    namespace: string;
+    op: string;
+    variables: Record<string, unknown>;
+    idempotencyKey?: string;
+}
+interface OperationTransportResponse {
+    ok: boolean;
+    status: number;
+    body: unknown;
+}
+type OperationTransport = (request: OperationTransportRequest) => Promise<OperationTransportResponse>;
+/**
+ * Execute generated operations through a host-owned authenticated transport.
+ * No credential handling, retries, or global configuration. The manifest is
+ * validated once and copied, so later caller mutation cannot alter the target.
+ */
+declare function createOperationExecutorWithTransport({ namespace, manifest, transport }: {
+    namespace: string;
+    /** Accept generated JSON imports directly; validate them at construction. */
+    manifest: unknown;
+    transport: OperationTransport;
+}): TypedOperationExecutor;
+
 /** Bindable scalar for `query()` placeholders ($1, $2, …). */
 type QueryParam = string | number | boolean | null;
 /** Shape of one action in the generated `<Ns>Actions` map — params in, result out. */
@@ -240,4 +300,4 @@ declare function createServiceOrmClient<Tables extends Record<string, Record<str
     transport?: OrmTransport;
 }): OrmClient<Tables, Actions>;
 
-export { type FilterValue, type ManifestOperation, type OperationErrorEntry, type OperationExecutor, type OperationExecutorConfig, type OperationsManifest, type OrmActionShape, type OrmActions, type OrmClient, OrmClientError, OrmOperationError, type OrmTransport, type QueryParam, type ReadResponse, TableQuery, configureOrmOperations, createFetchTransport, createOperationExecutor, createOrmClient, createOrmFetch, createServiceOrmClient, executeOperation };
+export { type FilterValue, type ManifestOperation, type OperationErrorEntry, type OperationExecutor, type OperationExecutorConfig, type OperationReference, type OperationTransport, type OperationTransportRequest, type OperationTransportResponse, type OperationsManifest, type OrmActionShape, type OrmActions, type OrmClient, OrmClientError, OrmOperationError, type OrmTransport, type QueryParam, type ReadResponse, type SqlQueryParameter, type SqlQueryResult, type SqlQueryVariables, TableQuery, type TypedOperationExecutor, configureOrmOperations, createFetchTransport, createOperationExecutor, createOperationExecutorWithTransport, createOrmClient, createOrmFetch, createServiceOrmClient, executeOperation };

package/dist/client.js

@@ -1,15 +1,28 @@
 // src/constants.ts
+var NAMESPACE_PATTERN = /^[a-z][a-z0-9_]{0,40}$/;
 var ORM_DATA_TOKEN_HEADER = "x-sequence-data-token";
+var ORM_SERVICE_DATA_TOKEN_HEADER = "x-sequence-data-token-service";
+var MATERIALIZE_ACTOR = "orm:materialize";
+JSON.stringify({ sub: MATERIALIZE_ACTOR, org: null, roles: [], capabilities: [] });
 
-// src/client/transport.ts
+// src/client/errors.ts
 var OrmClientError = class extends Error {
   constructor(message, status = null) {
     super(message);
     this.status = status;
   }
-  // Widened to `string` so subclasses (e.g. OrmOperationError) can rename.
   name = "OrmClientError";
 };
+var OrmOperationError = class extends OrmClientError {
+  constructor(message, status, code, errors = []) {
+    super(message, status);
+    this.code = code;
+    this.errors = errors;
+  }
+  name = "OrmOperationError";
+};
+
+// src/client/transport.ts
 function createFetchTransport({
   baseUrl,
   getToken,
@@ -146,15 +159,45 @@ var TableQuery = class _TableQuery {
   }
 };
 
+// src/client/response.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isOperationError(value) {
+  if (!isRecord(value) || typeof value.message !== "string") return false;
+  if (value.extensions === void 0) return true;
+  return isRecord(value.extensions) && (value.extensions.code === void 0 || typeof value.extensions.code === "string");
+}
+function readOperationResponse({
+  ok,
+  status,
+  body
+}) {
+  const payload = isRecord(body) ? body : null;
+  const rawErrors = payload?.errors;
+  if (rawErrors !== void 0 && (!Array.isArray(rawErrors) || !rawErrors.every(isOperationError))) {
+    throw new OrmOperationError("malformed response: invalid errors", status, null);
+  }
+  const errors = rawErrors ?? [];
+  if (!ok || errors.length > 0) {
+    const first = errors[0];
+    throw new OrmOperationError(first?.message ?? `HTTP ${status}`, status, first?.extensions?.code ?? null, errors);
+  }
+  if (!payload || payload.data === void 0 || payload.data === null) {
+    throw new OrmOperationError("malformed response: missing data", status, null);
+  }
+  if (!isRecord(payload.data)) {
+    throw new OrmOperationError("malformed response: data must be an object", status, null);
+  }
+  return payload.data;
+}
+
 // src/client/operations.ts
-var OrmOperationError = class extends OrmClientError {
-  constructor(message, status, code, errors = []) {
-    super(message, status);
-    this.code = code;
-    this.errors = errors;
+function validateIdempotencyKey(key) {
+  if (key !== void 0 && !/^[A-Za-z0-9._:-]{1,128}$/.test(key)) {
+    throw new OrmClientError("idempotencyKey must be 1\u2013128 letters, digits, dots, underscores, colons or hyphens");
   }
-  name = "OrmOperationError";
-};
+}
 var dataPlanePath = (namespace) => `/_data/v2/${namespace}`;
 function resolveOpHash(manifest, op) {
   if (op.startsWith("sha256:")) return op;
@@ -180,34 +223,25 @@ function createOperationExecutor({
     throw new OrmClientError("provide exactly one of getToken (bearer) or getDataToken (delegated)");
   }
   const root = baseUrl.replace(/\/+$/, "");
-  return {
-    async execute(op, variables = {}) {
-      const hash = resolveOpHash(manifest, op);
-      const token = await (getDataToken ?? getToken)();
-      if (!token) throw new OrmClientError("not authenticated \u2014 no token available");
-      const auth = getDataToken ? { [ORM_DATA_TOKEN_HEADER]: token } : { Authorization: `Bearer ${token}` };
-      const response = await fetchImpl(`${root}${dataPlanePath(namespace)}`, {
-        method: "POST",
-        headers: { ...auth, "Content-Type": "application/json" },
-        body: JSON.stringify({ op: hash, variables })
-      });
-      const payload = await response.json().catch(() => null);
-      const errors = payload?.errors ?? [];
-      if (!response.ok || errors.length > 0) {
-        const first = errors[0];
-        throw new OrmOperationError(
-          first?.message ?? `HTTP ${response.status}`,
-          response.status,
-          first?.extensions?.code ?? null,
-          errors
-        );
-      }
-      if (!payload || payload.data === void 0 || payload.data === null) {
-        throw new OrmOperationError("malformed response: missing data", response.status, null);
-      }
-      return payload.data;
-    }
-  };
+  async function execute(op, variables = {}, options = {}) {
+    validateIdempotencyKey(options.idempotencyKey);
+    if (typeof op !== "string" && op.namespace !== namespace) throw new OrmClientError("operation belongs to a different namespace");
+    const hash = typeof op === "string" ? resolveOpHash(manifest, op) : op.hash;
+    const token = await (getDataToken ?? getToken)();
+    if (!token) throw new OrmClientError("not authenticated \u2014 no token available");
+    const auth = getDataToken ? { [ORM_DATA_TOKEN_HEADER]: token } : { Authorization: `Bearer ${token}` };
+    const response = await fetchImpl(`${root}${dataPlanePath(namespace)}`, {
+      method: "POST",
+      headers: { ...auth, "Content-Type": "application/json" },
+      body: JSON.stringify({ op: hash, variables, idempotencyKey: options.idempotencyKey })
+    });
+    return readOperationResponse({
+      ok: response.ok,
+      status: response.status,
+      body: await response.json().catch(() => null)
+    });
+  }
+  return { execute };
 }
 var configured = null;
 function configureOrmOperations(config) {
@@ -216,14 +250,15 @@ function configureOrmOperations(config) {
 }
 async function executeOperation({
   op,
-  variables
+  variables,
+  idempotencyKey
 }) {
   if (!configured) {
     throw new OrmClientError(
       "ORM operations client not configured \u2014 call configureOrmOperations({ baseUrl, namespace, manifest, getToken }) at startup"
     );
   }
-  return configured.execute(op, variables);
+  return configured.execute(op, variables, idempotencyKey === void 0 ? {} : { idempotencyKey });
 }
 function createOrmFetch({
   baseUrl,
@@ -249,17 +284,60 @@ function createOrmFetch({
       );
     }
     const hash = resolveOpHash(manifest, name);
+    const idempotencyKey = new Headers(init?.headers).get("Idempotency-Key") ?? void 0;
+    validateIdempotencyKey(idempotencyKey);
     const token = await (getDataToken ?? getToken)();
     if (!token) throw new OrmClientError("not authenticated \u2014 no token available");
     const auth = getDataToken ? { [ORM_DATA_TOKEN_HEADER]: token } : { Authorization: `Bearer ${token}` };
     return fetchImpl(url, {
       method: "POST",
       headers: { ...auth, "Content-Type": "application/json" },
-      body: JSON.stringify({ op: hash, variables: parsed.variables ?? {} })
+      body: JSON.stringify({ op: hash, variables: parsed.variables ?? {}, idempotencyKey }),
+      ...init?.signal ? { signal: init.signal } : {}
     });
   };
 }
 
+// src/client/transport-executor.ts
+var operationHash = /^sha256:[a-f0-9]{64}$/;
+function readManifestHashes(manifest) {
+  if (!isRecord(manifest) || typeof manifest.schemaHash !== "string" || !manifest.schemaHash || !isRecord(manifest.operations)) {
+    throw new OrmClientError("invalid operations manifest \u2014 use operations.manifest.json from seq-studio orm generate");
+  }
+  const hashes = /* @__PURE__ */ new Map();
+  for (const [name, entry] of Object.entries(manifest.operations)) {
+    if (!/^[_A-Za-z][_0-9A-Za-z]*$/.test(name) || !isRecord(entry) || typeof entry.hash !== "string" || !operationHash.test(entry.hash) || entry.kind !== "query" && entry.kind !== "mutation") {
+      throw new OrmClientError(`invalid operations manifest entry "${name}" \u2014 regenerate the manifest`);
+    }
+    hashes.set(name, entry.hash);
+  }
+  return hashes;
+}
+function createOperationExecutorWithTransport({ namespace, manifest, transport }) {
+  if (typeof namespace !== "string" || !NAMESPACE_PATTERN.test(namespace)) throw new OrmClientError("invalid ORM namespace \u2014 expected a lowercase identifier of at most 41 characters");
+  const hashes = readManifestHashes(manifest);
+  const knownHashes = new Set(hashes.values());
+  async function execute(op, variables = {}, options = {}) {
+    validateIdempotencyKey(options.idempotencyKey);
+    if (typeof op !== "string" && op.namespace !== namespace) throw new OrmClientError("operation belongs to a different namespace");
+    const selector = typeof op === "string" ? op : op.hash;
+    const hash = hashes.get(selector) ?? (knownHashes.has(selector) ? selector : void 0);
+    if (!hash) throw new OrmClientError(`unknown operation "${op}" \u2014 not in the manifest (${hashes.size} known). Re-run seq-studio orm generate.`);
+    if (!isRecord(variables)) throw new OrmClientError("operation variables must be an object");
+    const response = await transport({
+      namespace,
+      op: hash,
+      variables,
+      ...options.idempotencyKey === void 0 ? {} : { idempotencyKey: options.idempotencyKey }
+    });
+    if (!response || typeof response.ok !== "boolean" || !Number.isInteger(response.status) || response.status < 100 || response.status > 599 || response.ok !== (response.status >= 200 && response.status < 300)) {
+      throw new OrmOperationError("malformed transport response", null, null);
+    }
+    return readOperationResponse(response);
+  }
+  return { execute };
+}
+
 // src/client/index.ts
 function createOrmClient({
   namespace,
@@ -327,6 +405,6 @@ function requireOption(value, name) {
   return value;
 }
 
-export { OrmClientError, OrmOperationError, TableQuery, configureOrmOperations, createFetchTransport, createOperationExecutor, createOrmClient, createOrmFetch, createServiceOrmClient, executeOperation };
+export { NAMESPACE_PATTERN, ORM_DATA_TOKEN_HEADER, ORM_SERVICE_DATA_TOKEN_HEADER, OrmClientError, OrmOperationError, TableQuery, configureOrmOperations, createFetchTransport, createOperationExecutor, createOperationExecutorWithTransport, createOrmClient, createOrmFetch, createServiceOrmClient, executeOperation };
 //# sourceMappingURL=client.js.map
 //# sourceMappingURL=client.js.map