aimeat 3.1.0 → 3.3.0

package/dist/src/services/datapackage/odata.js

@@ -0,0 +1,256 @@
+/** Every system query option this implementation honours. Anything else is refused by name. */
+export const ODATA_SUPPORTED = ['$select', '$top', '$skip', '$filter', '$orderby', '$count', '$format'];
+/** Frictionless type → EDM primitive. The one mapping; nothing else decides an OData type. */
+const EDM = {
+    string: 'Edm.String',
+    integer: 'Edm.Int64',
+    number: 'Edm.Double',
+    boolean: 'Edm.Boolean',
+    date: 'Edm.Date',
+    datetime: 'Edm.DateTimeOffset',
+    any: 'Edm.String',
+};
+/** The synthetic key. A CSV row has no identity of its own, and OData requires an entity key — so
+ *  one is supplied rather than a natural column being promoted to a role it cannot fill. It is the
+ *  row's ordinal WITHIN THIS IMMUTABLE VERSION, which is stable precisely because the version is. */
+export const ROW_KEY = 'RowId';
+/** XML text, escaped. A field name comes from the producer's data, so it is not trusted markup. */
+function xml(s) {
+    return String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;').replace(/'/g, '&apos;');
+}
+/** A CSDL identifier: letters, digits and underscore, not starting with a digit. A column called
+ *  `first name` or `2026` is legal in a CSV and illegal here, so it is mapped rather than rejected —
+ *  and the mapping is recorded in the descriptor's own field name, which does not change. */
+export function edmName(raw) {
+    const cleaned = String(raw).replace(/[^A-Za-z0-9_]/g, '_');
+    return /^[0-9]/.test(cleaned) ? `_${cleaned}` : (cleaned || '_');
+}
+/**
+ * The CSDL v4 document (`$metadata`) for one package version.
+ *
+ * `Nullable="true"` on every property except the key, deliberately: a Table Schema's `primaryKey` is
+ * the only statement anybody made about required-ness, and claiming a column is non-nullable because
+ * it happened to be full in this version would be a promise the next version breaks.
+ */
+export function toCsdl(descriptor, namespace) {
+    // A CSDL namespace is a DOTTED identifier ("AIMEAT.shortages"), so each segment is sanitised and
+    // the dots survive. Running edmName over the whole string turned the separator into an
+    // underscore, and the EntitySet then named a type in a namespace nobody had declared.
+    const ns = String(namespace).split('.').map(edmName).join('.');
+    const types = descriptor.resources.map(r => entityType(r, ns)).join('\n');
+    const sets = descriptor.resources
+        .map(r => `        <EntitySet Name="${xml(edmName(r.name))}" EntityType="${xml(ns)}.${xml(edmName(r.name))}"/>`)
+        .join('\n');
+    return `<?xml version="1.0" encoding="utf-8"?>
+<edmx:Edmx Version="4.0" xmlns:edmx="http://docs.oasis-open.org/odata/ns/edmx">
+  <edmx:DataServices>
+    <Schema Namespace="${xml(ns)}" xmlns="http://docs.oasis-open.org/odata/ns/edm">
+${types}
+      <EntityContainer Name="Container">
+${sets}
+      </EntityContainer>
+    </Schema>
+  </edmx:DataServices>
+</edmx:Edmx>
+`;
+}
+function entityType(resource, _ns) {
+    const props = resource.schema.fields
+        .map(f => `        <Property Name="${xml(edmName(f.name))}" Type="${EDM[f.type] ?? 'Edm.String'}" Nullable="true"/>`)
+        .join('\n');
+    return `      <EntityType Name="${xml(edmName(resource.name))}">
+        <Key><PropertyRef Name="${ROW_KEY}"/></Key>
+        <Property Name="${ROW_KEY}" Type="Edm.Int64" Nullable="false"/>
+${props}
+      </EntityType>`;
+}
+const COMPARISON = /^\s*([A-Za-z_][A-Za-z0-9_]*)\s+(eq|ne|gt|ge|lt|le)\s+(.+?)\s*$/;
+const FUNCTION = /^\s*(contains|startswith|endswith)\s*\(\s*([A-Za-z_][A-Za-z0-9_]*)\s*,\s*(.+?)\s*\)\s*$/;
+/** An OData literal: a quoted string (with '' for an embedded quote), a number, true/false, null. */
+function literal(raw) {
+    const s = raw.trim();
+    if (/^'.*'$/s.test(s))
+        return s.slice(1, -1).replace(/''/g, "'");
+    if (/^-?\d+$/.test(s))
+        return parseInt(s, 10);
+    if (/^-?\d*\.\d+([eE][+-]?\d+)?$/.test(s))
+        return parseFloat(s);
+    if (s === 'true')
+        return true;
+    if (s === 'false')
+        return false;
+    if (s === 'null')
+        return null;
+    return undefined; // not a literal this implementation reads
+}
+/**
+ * Read the system query options, refusing everything not understood.
+ *
+ * The `edmName` mapping runs in both directions here: a client saw `first_name` in the metadata and
+ * sends `$filter=first_name eq 'x'`, while the row still holds `first name`. Resolving through the
+ * schema means the client only ever has to know the names the metadata gave it.
+ */
+export function parseQuery(params, schema) {
+    // Every field, addressable by the name the metadata published.
+    const byEdm = new Map(schema.fields.map(f => [edmName(f.name), f.name]));
+    byEdm.set(ROW_KEY, ROW_KEY);
+    for (const key of params.keys()) {
+        if (!key.startsWith('$'))
+            continue; // a custom parameter is the caller's business
+        if (!ODATA_SUPPORTED.includes(key)) {
+            return {
+                ok: false, code: 'NOT_IMPLEMENTED',
+                message: `${key} is not implemented on this feed. Supported: ${ODATA_SUPPORTED.join(', ')}. `
+                    + 'It is refused rather than ignored, because an ignored query option returns more rows '
+                    + 'than you asked for and looks like an answer.',
+            };
+        }
+    }
+    const out = { skip: 0, filters: [], orderby: [], count: false };
+    const select = params.get('$select');
+    if (select) {
+        const names = [];
+        for (const raw of select.split(',').map(s => s.trim()).filter(Boolean)) {
+            const real = byEdm.get(raw);
+            if (!real)
+                return { ok: false, code: 'BAD_REQUEST', message: `$select names no such property: ${raw}` };
+            names.push(real);
+        }
+        out.select = names;
+    }
+    for (const [name, target] of [['$top', 'top'], ['$skip', 'skip']]) {
+        const raw = params.get(name);
+        if (raw === null)
+            continue;
+        const n = Number(raw);
+        if (!Number.isInteger(n) || n < 0) {
+            return { ok: false, code: 'BAD_REQUEST', message: `${name} must be a non-negative integer, got "${raw}"` };
+        }
+        if (target === 'top')
+            out.top = n;
+        else
+            out.skip = n;
+    }
+    const count = params.get('$count');
+    if (count !== null) {
+        if (count !== 'true' && count !== 'false') {
+            return { ok: false, code: 'BAD_REQUEST', message: `$count must be true or false, got "${count}"` };
+        }
+        out.count = count === 'true';
+    }
+    const orderby = params.get('$orderby');
+    if (orderby) {
+        for (const clause of orderby.split(',').map(s => s.trim()).filter(Boolean)) {
+            const [field, dir] = clause.split(/\s+/);
+            const real = byEdm.get(field);
+            if (!real)
+                return { ok: false, code: 'BAD_REQUEST', message: `$orderby names no such property: ${field}` };
+            if (dir && dir !== 'asc' && dir !== 'desc') {
+                return { ok: false, code: 'BAD_REQUEST', message: `$orderby direction must be asc or desc, got "${dir}"` };
+            }
+            out.orderby.push({ field: real, desc: dir === 'desc' });
+        }
+    }
+    const filter = params.get('$filter');
+    if (filter) {
+        // `or` and `not` get their OWN refusal, ahead of everything else, because the split below is
+        // on `and`: an `or` left in would be silently torn into two ANDed clauses and match FEWER
+        // rows than asked for, with no symptom at all. Tested with string literals blanked first, so
+        // `name eq 'or'` is data rather than an operator.
+        const bare = filter.replace(/'(?:[^']|'')*'/g, "''");
+        if (/\bor\b/i.test(bare) || /\bnot\b/i.test(bare)) {
+            return {
+                ok: false, code: 'NOT_IMPLEMENTED',
+                message: '$filter supports `field op value` clauses joined by `and`, plus contains(), '
+                    + 'startswith() and endswith(). `or` and `not` are not implemented. Refused rather '
+                    + 'than partly applied: a filter this server half-understood would return the wrong '
+                    + 'rows and look like an answer.',
+            };
+        }
+        // Anything else fails per CLAUSE, which is where the message can name the offending text.
+        for (const clause of filter.split(/\s+and\s+/i)) {
+            const node = parseClause(clause, byEdm);
+            if ('message' in node)
+                return { ok: false, code: node.code, message: node.message };
+            out.filters.push(node);
+        }
+    }
+    return { ok: true, value: out };
+}
+function parseClause(clause, byEdm) {
+    const fn = FUNCTION.exec(clause);
+    if (fn) {
+        const real = byEdm.get(fn[2]);
+        if (!real)
+            return { code: 'BAD_REQUEST', message: `$filter names no such property: ${fn[2]}` };
+        const v = literal(fn[3]);
+        if (v === undefined)
+            return { code: 'BAD_REQUEST', message: `$filter value not understood: ${fn[3]}` };
+        return { field: real, op: fn[1], value: v };
+    }
+    const cmp = COMPARISON.exec(clause);
+    if (cmp) {
+        const real = byEdm.get(cmp[1]);
+        if (!real)
+            return { code: 'BAD_REQUEST', message: `$filter names no such property: ${cmp[1]}` };
+        const v = literal(cmp[3]);
+        if (v === undefined)
+            return { code: 'BAD_REQUEST', message: `$filter value not understood: ${cmp[3]}` };
+        return { field: real, op: cmp[2], value: v };
+    }
+    return {
+        code: 'NOT_IMPLEMENTED',
+        message: `$filter clause not understood: "${clause.trim()}". This feed reads `
+            + '`field eq|ne|gt|ge|lt|le value` and contains/startswith/endswith(field, \'value\'), joined by `and`.',
+    };
+}
+/** Comparable form: a date string sorts and compares correctly as a string because it is ISO 8601. */
+function cmpValue(a, b) {
+    if (a === null || a === undefined)
+        return b === null || b === undefined ? 0 : -1;
+    if (b === null || b === undefined)
+        return 1;
+    if (typeof a === 'number' && typeof b === 'number')
+        return a - b;
+    return String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0;
+}
+function matches(row, f) {
+    const v = row[f.field];
+    switch (f.op) {
+        case 'eq': return cmpValue(v, f.value) === 0;
+        case 'ne': return cmpValue(v, f.value) !== 0;
+        case 'gt': return cmpValue(v, f.value) > 0;
+        case 'ge': return cmpValue(v, f.value) >= 0;
+        case 'lt': return cmpValue(v, f.value) < 0;
+        case 'le': return cmpValue(v, f.value) <= 0;
+        case 'contains': return String(v ?? '').includes(String(f.value));
+        case 'startswith': return String(v ?? '').startsWith(String(f.value));
+        case 'endswith': return String(v ?? '').endsWith(String(f.value));
+    }
+}
+/**
+ * Apply the parsed query. `RowId` is assigned before filtering, so a row keeps the same key whatever
+ * a client asks for — a key that shifted with the query would make the entity identity meaningless.
+ */
+export function applyQuery(rows, q, schema) {
+    let out = rows.map((r, i) => ({ [ROW_KEY]: i, ...r }));
+    for (const f of q.filters)
+        out = out.filter(r => matches(r, f));
+    const matched = out.length;
+    for (const o of [...q.orderby].reverse()) {
+        out = [...out].sort((a, b) => (o.desc ? -1 : 1) * cmpValue(a[o.field], b[o.field]));
+    }
+    out = out.slice(q.skip, q.top === undefined ? undefined : q.skip + q.top);
+    if (q.select) {
+        const keep = new Set([ROW_KEY, ...q.select]);
+        out = out.map(r => Object.fromEntries(Object.entries(r).filter(([k]) => keep.has(k))));
+    }
+    // Property names go back out as the metadata published them, which is what the client asked with.
+    const rename = new Map(schema.fields.map(f => [f.name, edmName(f.name)]));
+    return {
+        rows: out.map(r => Object.fromEntries(Object.entries(r).map(([k, v]) => [rename.get(k) ?? k, v]))),
+        matched,
+    };
+}
+//# sourceMappingURL=odata.js.map

package/dist/src/services/datapackage/odata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"odata.js","sourceRoot":"","sources":["../../../../src/services/datapackage/odata.ts"],"names":[],"mappings":"AA+BA,+FAA+F;AAC/F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEjH,8FAA8F;AAC9F,MAAM,GAAG,GAA8B;IACnC,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,aAAa;IACtB,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,oBAAoB;IAC9B,GAAG,EAAE,YAAY;CACpB,CAAC;AAEF;;qGAEqG;AACrG,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,mGAAmG;AACnG,SAAS,GAAG,CAAC,CAAS;IAClB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SAC9E,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED;;6FAE6F;AAC7F,MAAM,UAAU,OAAO,CAAC,GAAW;IAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,UAAsB,EAAE,SAAiB;IAC5D,iGAAiG;IACjG,uFAAuF;IACvF,sFAAsF;IACtF,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS;SAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,4BAA4B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;SAC/G,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,OAAO;;;yBAGc,GAAG,CAAC,EAAE,CAAC;EAC9B,KAAK;;EAEL,IAAI;;;;;CAKL,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAAC,QAA4B,EAAE,GAAW;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,2BAA2B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,YAAY,qBAAqB,CAAC;SACpH,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,OAAO,2BAA2B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;kCAC/B,OAAO;0BACf,OAAO;EAC/B,KAAK;oBACa,CAAC;AACrB,CAAC;AAwBD,MAAM,UAAU,GAAG,gEAAgE,CAAC;AACpF,MAAM,QAAQ,GAAG,yFAAyF,CAAC;AAE3G,qGAAqG;AACrG,SAAS,OAAO,CAAC,GAAW;IACxB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,SAAS,CAAC,CAAG,0CAA0C;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,MAAuB,EAAE,MAAmB;IACnE,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAG,8CAA8C;QACpF,IAAI,CAAE,eAAqC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO;gBACH,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB;gBAClC,OAAO,EAAE,GAAG,GAAG,gDAAgD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;sBACvF,uFAAuF;sBACvF,8CAA8C;aACvD,CAAC;QACN,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAgB,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAE7E,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,GAAG,EAAE,EAAE,CAAC;YACxG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAU,EAAE,CAAC;QACzE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,IAAI,yCAAyC,GAAG,GAAG,EAAE,CAAC;QAC/G,CAAC;QACD,IAAI,MAAM,KAAK,KAAK;YAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;;YAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,sCAAsC,KAAK,GAAG,EAAE,CAAC;QACvG,CAAC;QACD,GAAG,CAAC,KAAK,GAAG,KAAK,KAAK,MAAM,CAAC;IACjC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,OAAO,EAAE,CAAC;QACV,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,oCAAoC,KAAK,EAAE,EAAE,CAAC;YAC3G,IAAI,GAAG,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gDAAgD,GAAG,GAAG,EAAE,CAAC;YAC/G,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,MAAM,EAAE,CAAC;QACT,6FAA6F;QAC7F,0FAA0F;QAC1F,6FAA6F;QAC7F,kDAAkD;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,OAAO;gBACH,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB;gBAClC,OAAO,EAAE,8EAA8E;sBACjF,kFAAkF;sBAClF,mFAAmF;sBACnF,+BAA+B;aACxC,CAAC;QACN,CAAC;QACD,0FAA0F;QAC1F,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,SAAS,IAAI,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACpF,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAChB,MAAc,EAAE,KAA0B;IAE1C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,EAAE,EAAE,CAAC;QACL,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/F,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACvG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,EAAE,CAAC;QACN,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChG,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,iCAAiC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,OAAO;QACH,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,mCAAmC,MAAM,CAAC,IAAI,EAAE,qBAAqB;cACxE,sGAAsG;KAC/G,CAAC;AACN,CAAC;AAED,sGAAsG;AACtG,SAAS,QAAQ,CAAC,CAAU,EAAE,CAAU;IACpC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,CAAa;IACxD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvB,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACX,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,KAAK,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,KAAK,UAAU,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;AACL,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAoC,EAAE,CAAc,EAAE,MAAmB;IAChG,IAAI,GAAG,GAAmC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;QAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC;IAE3B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACvC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAE1E,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,kGAAkG;IAClG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO;QACH,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,OAAO;KACV,CAAC;AACN,CAAC"}

package/dist/src/services/datapackage/odps.d.ts

@@ -0,0 +1,24 @@
+import { type Descriptor } from './contract.js';
+/** Where the generated sheet sits, beside the descriptor it was projected from. */
+export declare const odpsYamlKey: (name: string, contentHash: string) => string;
+export interface OdpsProjectionInput {
+    descriptor: Descriptor;
+    ownerGhii: string;
+    baseUrl: string;
+    /** The permanent, session-free URL of each resource's CSV, keyed by resource name. */
+    resourceUrls: Record<string, string>;
+    descriptorUrl: string;
+    /** ISO 639-1 language the `details` block is keyed by. v4.1 requires the map. */
+    lang?: string;
+}
+/**
+ * Project one published version into an ODPS v4.1 document.
+ *
+ * Everything traces to the descriptor. `status` is 'production' because a published version at a
+ * permanent immutable address is exactly that — a draft is a thing that has not been published, and
+ * this function only ever sees published ones.
+ */
+export declare function descriptorToOdps(input: OdpsProjectionInput): Record<string, unknown>;
+/** The generated sheet as YAML — the format ODPS leads with. */
+export declare function odpsToYamlDocument(doc: Record<string, unknown>): string;
+//# sourceMappingURL=odps.d.ts.map

package/dist/src/services/datapackage/odps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"odps.d.ts","sourceRoot":"","sources":["../../../../src/services/datapackage/odps.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAwB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAEtE,mFAAmF;AACnF,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,EAAE,aAAa,MAAM,KAAG,MACJ,CAAC;AA0B7D,MAAM,WAAW,mBAAmB;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoHpF;AAED,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEvE"}

package/dist/src/services/datapackage/odps.js

@@ -0,0 +1,183 @@
+/**
+ * @file src/services/datapackage/odps.ts
+ * @description The product sheet, as a projection of the descriptor. `odps.yaml` is generated into
+ *   every published version so a package is describable to a buyer without anyone authoring a second
+ *   document about it.
+ *
+ *   ONE SCHEMA, MANY PROJECTIONS, and this is one of the projections. The Table Schema is the only
+ *   place columns and types are declared; the ODPS sheet, the CSV header and an agent's view of the
+ *   package are all derived from it, so they cannot drift. Nothing here is authored — every field
+ *   traces to something the descriptor already holds, which is why it stays true when the package
+ *   changes and why it needs no mapping layer to maintain.
+ *
+ *   THREE PLACES THE SPEC'S CLOSED ENUMS DO NOT FIT, handled the same way each time: state it under
+ *   `x-aimeat` rather than bend a field to nearly mean it.
+ *   - `dataAccess[].format` is `TOON|JSON|XML|CSV|Excel|zip|plain text|GraphQL|MCP`. CSV is on it, so
+ *     today's canonical form declares itself honestly. Parquet is not, and when Parquet arrives it
+ *     goes in the extension block rather than being called `zip`.
+ *   - `specification` is `OAS|RAML|Slate|MCP`. A plain file has no API specification, so the field is
+ *     simply absent rather than filled with the closest wrong answer.
+ *   - `updateFrequency` IS in the SLA dimension enum, and it is filled from the producer's cron —
+ *     recorded, not described. A package nobody schedules gets no SLA block at all: an unstated
+ *     service level is an absent one, never a promise of daily.
+ * @structure descriptorToOdps · odpsYamlKey
+ * @usage const doc = descriptorToOdps({ descriptor, ownerGhii, baseUrl, resourceUrls });
+ * @version-history
+ *   v1.0.0 -- 2026-08-15 -- Initial (TARGET-063 vaihe 1: "the package is sellable").
+ */
+import { stringify as yamlStringify } from 'yaml';
+import { ODPS_VERSION, ODPS_SCHEMA_URL_YAML } from '../exchange-odps.js';
+import { bare, packageKeyRoot } from './contract.js';
+/** Where the generated sheet sits, beside the descriptor it was projected from. */
+export const odpsYamlKey = (name, contentHash) => `${packageKeyRoot(name)}/${bare(contentHash)}/odps.yaml`;
+/**
+ * A cron expression as an ODPS `updateFrequency` objective.
+ *
+ * Deliberately coarse: the SLA dimension takes a number and a unit, and a cron says more than that
+ * shape can hold. What a buyer needs from it is the ORDER OF MAGNITUDE — is this refreshed daily or
+ * quarterly — and an expression it cannot express is answered with null rather than a rounded
+ * fiction. `unit: 'never'` is the enum's own word for "no cadence", which is not the same as a
+ * cadence nobody stated.
+ */
+function updateFrequencyFrom(cron) {
+    if (!cron)
+        return null;
+    const parts = cron.trim().split(/\s+/);
+    if (parts.length < 5)
+        return null;
+    const [, , dom, month, dow] = parts;
+    if (month !== '*')
+        return { objective: 1, unit: 'months' };
+    if (dom !== '*')
+        return { objective: 1, unit: 'months' };
+    if (dow !== '*') {
+        // A single weekday is weekly; a list of them is more often than that, and "days" is the
+        // honest floor rather than a fraction of a week.
+        return /^[0-7]$/.test(dow) ? { objective: 1, unit: 'weeks' } : { objective: 1, unit: 'days' };
+    }
+    return { objective: 1, unit: 'days' };
+}
+/**
+ * Project one published version into an ODPS v4.1 document.
+ *
+ * Everything traces to the descriptor. `status` is 'production' because a published version at a
+ * permanent immutable address is exactly that — a draft is a thing that has not been published, and
+ * this function only ever sees published ones.
+ */
+export function descriptorToOdps(input) {
+    const { descriptor: d, resourceUrls, descriptorUrl } = input;
+    const lang = input.lang ?? 'en';
+    const a = d.aimeat;
+    const columns = d.resources.flatMap(r => r.schema.fields.map(f => `${r.name}.${f.name} (${f.type})`));
+    const rowTotal = d.resources.reduce((n, r) => n + r.rowCount, 0);
+    const details = {
+        name: d.title ?? d.name,
+        productID: a.packageId,
+        // v4.1 `type`: this is a dataset delivered as files, which is what 'dataset' means here.
+        type: 'dataset',
+        status: 'production',
+        visibility: 'public',
+        version: bare(a.contentHash).slice(0, 12),
+        description: d.description
+            ?? `${rowTotal} rows across ${d.resources.length} resource(s), as a Frictionless Data Package.`,
+        // The change note is the version's own explanation, and ODPS has a field that means exactly
+        // that. It is required on every AIMEAT version, so this is never empty.
+        versionNotes: a.changes,
+        // The columns, from the ONE place they are declared. A buyer reading the sheet knows the
+        // shape before contracting, and this line cannot drift from the data.
+        tags: ['frictionless', 'data-package', d.name],
+        outputFileFormats: ['CSV'],
+        ...(a.sources?.length ? {
+            recommendedDataProducts: a.sources.filter(s => s.url).map(s => s.url),
+        } : {}),
+        // A free sample without a separate artefact: the first resource IS the file, and it is
+        // world-readable. Nobody buys data blind, and here they do not have to.
+        ...(Object.values(resourceUrls)[0] ? { contentSample: Object.values(resourceUrls)[0] } : {}),
+    };
+    const dataAccess = {
+        default: {
+            name: { [lang]: 'Permanent file address' },
+            description: {
+                [lang]: 'The resource CSV at a permanent, immutable URL. No authentication, no API key, '
+                    + 'byte ranges supported. The version is the content hash in the path, so this address '
+                    + 'can never answer with different bytes.',
+            },
+            outputPortType: 'file',
+            format: 'CSV',
+            authenticationMethod: 'none',
+            accessURL: Object.values(resourceUrls)[0] ?? descriptorUrl,
+            documentationURL: descriptorUrl,
+            hashType: 'SHA-256',
+            checksum: bare(d.resources[0]?.hash ?? a.contentHash),
+        },
+        descriptor: {
+            name: { [lang]: 'Frictionless descriptor' },
+            description: {
+                [lang]: 'datapackage.json with a Table Schema per resource. frictionless-py, R and the JS '
+                    + 'client resolve the resources from it with no AIMEAT knowledge.',
+            },
+            outputPortType: 'file',
+            format: 'JSON',
+            authenticationMethod: 'none',
+            accessURL: descriptorUrl,
+            documentationURL: descriptorUrl,
+        },
+    };
+    const freq = updateFrequencyFrom(a.producer.schedule);
+    const sla = freq
+        ? {
+            declarative: [{
+                    name: { [lang]: 'Producer cadence' },
+                    description: {
+                        [lang]: `Refreshed by a ${a.producer.kind} producer on the schedule "${a.producer.schedule}". `
+                            + 'A run that fails writes no version: the package stays on its previous one and the '
+                            + 'failure is recorded on the package pointer.',
+                    },
+                    dimensions: [{
+                            dimension: 'updateFrequency',
+                            objective: String(freq.objective),
+                            unit: freq.unit,
+                        }],
+                }],
+        }
+        : null;
+    return {
+        schema: ODPS_SCHEMA_URL_YAML,
+        version: ODPS_VERSION,
+        product: {
+            details: { [lang]: details },
+            dataAccess,
+            ...(a.license ? { license: { scope: { definition: a.license } } } : {}),
+            ...(sla ? { SLA: sla } : {}),
+            // Everything the closed enums cannot hold, stated rather than bent into a near-fit.
+            'x-aimeat': {
+                packageId: a.packageId,
+                contentHash: a.contentHash,
+                descriptorUrl,
+                profile: 'aimeat.datapackage/v1',
+                schemaSource: a.schemaSource,
+                producer: a.producer,
+                producedBy: a.producedBy,
+                resources: d.resources.map(r => ({
+                    name: r.name, rowCount: r.rowCount, bytes: r.bytes, hash: r.hash,
+                    url: resourceUrls[r.name] ?? null,
+                    fields: r.schema.fields.map(f => ({ name: f.name, type: f.type })),
+                })),
+                columns,
+                ...(a.legalBasis ? { legalBasis: a.legalBasis } : {}),
+                ...(a.consentStatus ? { consentStatus: a.consentStatus } : {}),
+                ...(a.retention ? { retention: a.retention } : {}),
+                ...(a.retentionPolicy ? { retentionPolicy: a.retentionPolicy } : {}),
+                ...(a.lineage?.length ? { lineage: a.lineage } : {}),
+                ...(a.transformations?.length ? { transformations: a.transformations } : {}),
+                ...(a.supersedes ? { supersedes: a.supersedes } : {}),
+                ...(a.aiProvenanceId ? { aiProvenanceId: a.aiProvenanceId } : {}),
+            },
+        },
+    };
+}
+/** The generated sheet as YAML — the format ODPS leads with. */
+export function odpsToYamlDocument(doc) {
+    return yamlStringify(doc, { lineWidth: 0 });
+}
+//# sourceMappingURL=odps.js.map

package/dist/src/services/datapackage/odps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"odps.js","sourceRoot":"","sources":["../../../../src/services/datapackage/odps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAmB,MAAM,eAAe,CAAC;AAEtE,mFAAmF;AACnF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAU,EAAE,CACrE,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;AAE7D;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,IAAwB;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,CAAC,EAAE,AAAD,EAAG,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IACpC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3D,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzD,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QACd,wFAAwF;QACxF,iDAAiD;QACjD,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAClG,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC;AAaD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA0B;IACvD,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAEnB,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEjE,MAAM,OAAO,GAA4B;QACrC,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI;QACvB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,yFAAyF;QACzF,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,YAAY;QACpB,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACzC,WAAW,EAAE,CAAC,CAAC,WAAW;eACnB,GAAG,QAAQ,gBAAgB,CAAC,CAAC,SAAS,CAAC,MAAM,+CAA+C;QACnG,4FAA4F;QAC5F,wEAAwE;QACxE,YAAY,EAAE,CAAC,CAAC,OAAO;QACvB,yFAAyF;QACzF,sEAAsE;QACtE,IAAI,EAAE,CAAC,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC;QAC9C,iBAAiB,EAAE,CAAC,KAAK,CAAC;QAC1B,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YACpB,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAa,CAAC;SAClF,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,uFAAuF;QACvF,wEAAwE;QACxE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC;IAEF,MAAM,UAAU,GAA4B;QACxC,OAAO,EAAE;YACL,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,wBAAwB,EAAE;YAC1C,WAAW,EAAE;gBACT,CAAC,IAAI,CAAC,EAAE,iFAAiF;sBACnF,sFAAsF;sBACtF,wCAAwC;aACjD;YACD,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,KAAK;YACb,oBAAoB,EAAE,MAAM;YAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa;YAC1D,gBAAgB,EAAE,aAAa;YAC/B,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC;SACxD;QACD,UAAU,EAAE;YACR,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,yBAAyB,EAAE;YAC3C,WAAW,EAAE;gBACT,CAAC,IAAI,CAAC,EAAE,mFAAmF;sBACrF,gEAAgE;aACzE;YACD,cAAc,EAAE,MAAM;YACtB,MAAM,EAAE,MAAM;YACd,oBAAoB,EAAE,MAAM;YAC5B,SAAS,EAAE,aAAa;YACxB,gBAAgB,EAAE,aAAa;SAClC;KACJ,CAAC;IAEF,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI;QACZ,CAAC,CAAC;YACE,WAAW,EAAE,CAAC;oBACV,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,kBAAkB,EAAE;oBACpC,WAAW,EAAE;wBACT,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,IAAI,8BAA8B,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK;8BACzF,oFAAoF;8BACpF,6CAA6C;qBACtD;oBACD,UAAU,EAAE,CAAC;4BACT,SAAS,EAAE,iBAAiB;4BAC5B,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;4BACjC,IAAI,EAAE,IAAI,CAAC,IAAI;yBAClB,CAAC;iBACL,CAAC;SACL;QACD,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO;QACH,MAAM,EAAE,oBAAoB;QAC5B,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE;YACL,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE;YAC5B,UAAU;YACV,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,oFAAoF;YACpF,UAAU,EAAE;gBACR,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,aAAa;gBACb,OAAO,EAAE,uBAAuB;gBAChC,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;oBAChE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI;oBACjC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;iBACrE,CAAC,CAAC;gBACH,OAAO;gBACP,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,GAAG,CAAC,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;SACJ;KACJ,CAAC;AACN,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,GAA4B;IAC3D,OAAO,aAAa,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AAChD,CAAC"}

package/dist/src/services/datapackage/store.d.ts

@@ -0,0 +1,143 @@
+/**
+ * @file src/services/datapackage/store.ts
+ * @description Publishing and reading an AIMEAT Data Package — the one implementation the three
+ *   bindings (ctx.datapackage, the browser library, the MCP tools) all reach.
+ *
+ *   REFUSE BEFORE YOU WRITE. `publish` validates every resource against its own Table Schema and
+ *   returns the coordinates of what is wrong WITHOUT having stored a byte. The order is the point:
+ *   this node's own audit found three defects of exactly one shape — bytes written before the name
+ *   was claimed, a paywall standing down before comparing the coordinate, a response sent before the
+ *   work it announced. A publish that wrote the CSV and then discovered the schema was violated would
+ *   leave a half-version at a permanent address, which is worse than no version at all.
+ *
+ *   AND A FAILED RUN LEAVES THE PREVIOUS VERSION STANDING. `recordFailure` writes the reason onto
+ *   the mutable `latest.json` pointer and touches nothing else, so a consumer following the newest
+ *   version keeps reading the last good one and can see that the newest attempt failed, when, and
+ *   why. No empty version, no truncated version, no silent success.
+ *
+ *   TWO SURFACES, ONE TRUTH. The BYTES in storage are canonical — a permanent, auth-free,
+ *   range-readable address that DuckDB, pandas and frictionless-py read with no AIMEAT knowledge.
+ *   The knowledge package written beside them is a CATALOGUE entry (`content_type: 'dataset'`, the
+ *   value the closed union already has — `data-package` is not in it) so the package appears where a
+ *   person and an agent look for knowledge. The catalogue points at the bytes; it never holds them,
+ *   because a knowledge package is a collection of memory entries and memory does not carry files.
+ * @structure publishPackage · openPackage · readRows · recordFailure · listPackages
+ * @usage
+ *   const out = await publishPackage({ storage, config }, ownerGhii, input, producedBy);
+ *   if (!out.ok) return out.issues;
+ * @version-history
+ *   v1.0.0 -- 2026-08-15 -- Initial (TARGET-063 vaihe 1, A4/B1/B2).
+ */
+import type { AimeatConfig } from '../../config.js';
+import type { Storage } from '../../storage/interface.js';
+import { type Descriptor, type LatestPointer, type PublishInput, type TableSchema } from './contract.js';
+import { type ValidationIssue } from './table.js';
+export interface StoreDeps {
+    storage: Storage;
+    config: AimeatConfig;
+}
+/** Who produced this version. Every road knows it; none of them may make it up. */
+export interface ProducedBy {
+    /** The exact principal: an owner GHII, an agent GAII, or the owner on an unattended road. */
+    gaii: string;
+    kind: Descriptor['aimeat']['producer']['kind'];
+    ref?: string;
+    schedule?: string;
+    run?: string;
+}
+export type PublishResult = {
+    ok: true;
+    descriptor: Descriptor;
+    contentHash: string;
+    descriptorUrl: string;
+    unchanged: boolean;
+    resources: Array<{
+        name: string;
+        url: string;
+        rowCount: number;
+        bytes: number;
+    }>;
+    /** Versions the owner's retention policy removed on this publish. Empty when no policy is
+     *  set, which is the default: keep everything. Returned so the answer can SAY what was
+     *  deleted — a deletion nobody can see is how a history disappears unnoticed. */
+    pruned: string[];
+} | {
+    ok: false;
+    code: 'INVALID_INPUT' | 'QUALITY_GATE';
+    message: string;
+    issues: ValidationIssue[];
+};
+/**
+ * Build, check and store one version.
+ *
+ * `unchanged: true` means the content hash matched what is already published: the same address
+ * already holds these exact bytes, so nothing was rewritten. That is not a failure and not a new
+ * version — it is a deterministic producer proving it is deterministic, and the caller should say
+ * so rather than announcing an update that did not happen.
+ */
+export declare function publishPackage(deps: StoreDeps, ownerGhii: string, input: PublishInput, producedBy: ProducedBy): Promise<PublishResult>;
+/**
+ * A run failed. The package stays on the version it had; the pointer says the newest attempt did not
+ * land, when, and why. This is the whole of "epäonnistuminen näkyy, eikä sitä peitetä": no empty
+ * version is written, and a consumer polling `latest.json` learns the difference between a package
+ * that has not changed and one whose producer is broken.
+ */
+export declare function recordFailure(deps: StoreDeps, ownerGhii: string, name: string, message: string): Promise<void>;
+export interface OpenedPackage {
+    descriptor: Descriptor;
+    descriptorUrl: string;
+    latest?: LatestPointer;
+}
+/**
+ * Read a package back. `ref` is `pkg:{owner}/{name}` for the newest version, or
+ * `pkg:{owner}/{name}@sha256:…` to pin one. A pinned reference always answers with the same bytes,
+ * which is what makes pinning worth anything.
+ */
+export declare function openPackage(deps: StoreDeps, ref: string, nodeId: string): Promise<OpenedPackage | null>;
+/** Rows of one resource, paginated. The caller names the window; nothing here decides to send a
+ *  whole table into somebody's context because it happened to fit. */
+export declare function readRows(deps: StoreDeps, ref: string, nodeId: string, resource: string, opts?: {
+    offset?: number;
+    limit?: number;
+    select?: string[];
+}): Promise<{
+    rows: Array<Record<string, unknown>>;
+    total: number;
+    schema: TableSchema;
+} | null>;
+/** Every package one owner has, newest version each, with any recorded failure. */
+export declare function listPackages(deps: StoreDeps, ownerGhii: string): Promise<LatestPointer[]>;
+/** One entry in a package's history: enough to decide about a version without opening it. */
+export interface VersionEntry {
+    contentHash: string;
+    /** When this version's descriptor was written. Not the descriptor's own `created`, which is the
+     *  first producer's clock; this is when these bytes landed here. */
+    at: string;
+    /** True for the one `latest.json` points at. There is exactly one, unless nothing is published. */
+    current: boolean;
+    /** The mandatory explanation. It is the reason a history is readable rather than a list of hashes. */
+    changes: string;
+    rowCount: number;
+    bytes: number;
+    descriptorUrl: string;
+    supersedes?: string;
+}
+/**
+ * Every version of one package, newest first.
+ *
+ * The versions are DISCOVERED FROM THE KEYS rather than from an index, because the keys are the
+ * index: a version is a directory named by its content hash, so nothing can be published without
+ * appearing here and nothing can be listed here without existing. An index would be a second thing
+ * to keep in step with the first.
+ *
+ * Each descriptor is read, which is one small GET per version. That is what makes `changes` and
+ * `rowCount` available, and it is bounded by the owner's retention policy rather than by time.
+ */
+export declare function listVersions(deps: StoreDeps, ownerGhii: string, name: string): Promise<VersionEntry[]>;
+/** `pkg:{owner}/{name}` or `pkg:{owner}/{name}@sha256:…`, or the bare `{name}` of your own. */
+export declare function parseRef(ref: string, nodeId: string): {
+    ownerGhii: string;
+    name: string;
+    contentHash?: string;
+} | null;
+//# sourceMappingURL=store.d.ts.map