quantum-framework 0.9.0__tar.gz → 0.10.0__tar.gz

{quantum_framework-0.9.0/quantum_framework.egg-info → quantum_framework-0.10.0}/PKG-INFO

@@ -1,11 +1,12 @@
 Metadata-Version: 2.4
 Name: quantum-framework
-Version: 0.9.0
+Version: 0.10.0
 Summary: Full-stack declarative framework for building web, desktop, and mobile applications
 Author-email: Daniel Gregorio <danielgregorio2611@gmail.com>
 License: MIT
-Project-URL: Homepage, https://quantum.sargas.cloud
-Project-URL: Documentation, https://quantum.sargas.cloud
+Project-URL: Homepage, https://github.com/danielgregorio/quantum
+Project-URL: Documentation, https://danielgregorio.github.io/quantum/
+Project-URL: Changelog, https://github.com/danielgregorio/quantum/releases
 Project-URL: Repository, https://github.com/danielgregorio/quantum
 Keywords: framework,declarative,xml,web,desktop,mobile
 Classifier: Development Status :: 4 - Beta
@@ -43,9 +44,10 @@ Dynamic: license-file
 # Quantum
 
 [![CI](https://github.com/danielgregorio/quantum/actions/workflows/ci.yml/badge.svg)](https://github.com/danielgregorio/quantum/actions/workflows/ci.yml)
-[![Docker](https://github.com/danielgregorio/quantum/actions/workflows/docker.yml/badge.svg)](https://github.com/danielgregorio/quantum/actions/workflows/docker.yml)
+[![PyPI](https://img.shields.io/pypi/v/quantum-framework)](https://pypi.org/project/quantum-framework/)
+[![Python](https://img.shields.io/pypi/pyversions/quantum-framework)](https://pypi.org/project/quantum-framework/)
 [![Docs](https://img.shields.io/badge/docs-github.io-blue)](https://danielgregorio.github.io/quantum/)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/danielgregorio/quantum/blob/main/LICENSE)
 
 > **Declarative web apps in XML, with AI and RAG built into the language.
 > No build chain, no JavaScript, no frontend framework.**
@@ -123,6 +125,9 @@ coercion of the model's arguments are the runtime's job.
 </q:component>
 ```
 
+Save it as `components/orders.q`, run `quantum start`, and it is served at
+`http://localhost:8080/orders`.
+
 `q:query` refuses to run SQL with an undeclared `:param` — parameterised queries are
 enforced by the parser, not by discipline.
 
@@ -134,14 +139,22 @@ Also core: `q:set` with `session.` / `application.` / `request.` scopes, `q:if`,
 
 ## Quick start
 
-**Requirements:** Python 3.11+ and `pip`.
+**Requirements:** Python 3.12+ and `pip`.
 
 ```bash
-git clone https://github.com/danielgregorio/quantum.git
-cd quantum
-pip install -e ".[dev]"
+pip install quantum-framework
+```
 
-quantum run examples/hello.q
+Create `hello.q`:
+
+```xml
+<q:component name="HelloWorld" xmlns:q="https://quantum.lang/ns">
+  <q:return value="Hello World!" />
+</q:component>
+```
+
+```bash
+quantum run hello.q
 ```
 
 ```
@@ -149,17 +162,21 @@ quantum run examples/hello.q
 [SUCCESS] Result: Hello World!
 ```
 
+For a web app, put `.q` files in `components/` and run `quantum start`
+(`components/index.q` is served at `/`). `quantum stop` stops it.
+
 For the AI examples you also need an [Ollama](https://ollama.com) server and the RAG
 extra:
 
 ```bash
-pip install -e ".[rag]"
+pip install "quantum-framework[rag]"
 ollama pull phi3 && ollama pull nomic-embed-text
 export QUANTUM_LLM_BASE_URL=http://localhost:11434
 ```
 
-Declare datasources in `quantum.config.yaml` and `q:query` works with nothing else
-running:
+Declare datasources in `quantum.config.yaml` (next to `components/`) and `q:query` works
+with nothing else running — SQLite needs no extra; PostgreSQL and MySQL drivers come with
+`pip install "quantum-framework[db]"`:
 
 ```yaml
 datasources:
@@ -173,26 +190,41 @@ datasources:
 | Command | What it does |
 |---------|--------------|
 | `run <file.q>` | Execute a component, app, or API |
-| `start` | Start the web server |
-| `deploy <dir>` | Deploy an application |
+| `start` | Start the web server (port 8080 by default; `--port` to change) |
+| `stop` | Stop the server started by `start` |
+| `deploy [path]` · `apps` | Deploy an application, manage deployed ones |
 | `pkg` · `jobs` · `mq` · `migrate` | Packages, jobs, message queues, migrations |
 
+### From source
+
+To work on Quantum itself:
+
+```bash
+git clone https://github.com/danielgregorio/quantum.git
+cd quantum
+pip install -e ".[dev]"
+quantum run examples/hello.q
+```
+
+See [CONTRIBUTING.md](https://github.com/danielgregorio/quantum/blob/main/CONTRIBUTING.md) for the test suite and the architecture.
+
 ---
 
 ## Documentation
 
-Full docs (VitePress) at **[danielgregorio.github.io/quantum](https://danielgregorio.github.io/quantum/)** and in
-[`docs/`](docs/):
+Full docs at **[danielgregorio.github.io/quantum](https://danielgregorio.github.io/quantum/)**:
+
+- [Getting Started](https://danielgregorio.github.io/quantum/guide/getting-started) · [Installation](https://danielgregorio.github.io/quantum/guide/installation) · [Quick Start](https://danielgregorio.github.io/quantum/guide/quick-start)
+- [Components](https://danielgregorio.github.io/quantum/guide/components) · [State](https://danielgregorio.github.io/quantum/guide/state-management) · [Loops](https://danielgregorio.github.io/quantum/guide/loops) · [Conditionals](https://danielgregorio.github.io/quantum/guide/conditionals)
+- [Queries](https://danielgregorio.github.io/quantum/guide/query) · [Functions](https://danielgregorio.github.io/quantum/guide/functions) · [Data fetching](https://danielgregorio.github.io/quantum/guide/data-fetching)
 
-- [Getting Started](docs/guide/getting-started.md) · [Installation](docs/guide/installation.md) · [Quick Start](docs/guide/quick-start.md)
-- [Components](docs/guide/components.md) · [State](docs/guide/state-management.md) · [Loops](docs/guide/loops.md) · [Conditionals](docs/guide/conditionals.md)
-- [Queries](docs/guide/query.md) · [Functions](docs/guide/functions.md) · [Data fetching](docs/guide/data-fetching.md)
+Releases and their notes are on the [GitHub Releases](https://github.com/danielgregorio/quantum/releases) page.
 
 ---
 
 ## Stability
 
-Support levels are defined in **[SUPPORT_TIERS.md](SUPPORT_TIERS.md)**. Short version:
+Support levels are defined in **[SUPPORT_TIERS.md](https://github.com/danielgregorio/quantum/blob/main/SUPPORT_TIERS.md)**. Short version:
 
 | Surface | Status |
 |---------|--------|
@@ -200,13 +232,11 @@ Support levels are defined in **[SUPPORT_TIERS.md](SUPPORT_TIERS.md)**. Short ve
 | AI — `q:llm`, `q:knowledge`, `q:agent` | **Beta** — validated end-to-end against a live Ollama server |
 | `q:team` (multi-agent handoff) | Beta, less exercised |
 | Jobs, messaging, websockets, mail, file uploads, `ui:*`, terminal target | **Experimental** — they run, but no API stability promise |
-| Python scripting (`q:python`, `q:pyclass`, `q:pyimport`) | Experimental, and a full-trust escape hatch — see [SECURITY.md](SECURITY.md) |
+| Python scripting (`q:python`, `q:pyclass`, `q:pyimport`) | Experimental, and a full-trust escape hatch — see [SECURITY.md](https://github.com/danielgregorio/quantum/blob/main/SECURITY.md) |
 
 A functional audit in 2026-09 found that several of these surfaces had never been run
-end-to-end despite being documented as complete. The findings and the fixes are in
-[`FULL_AUDIT_2026-09.md`](FULL_AUDIT_2026-09.md) and
-[`AUDIT_FIX_PLAN.md`](AUDIT_FIX_PLAN.md). Feature status is now verified by execution
-rather than asserted by hand.
+end-to-end despite being documented as complete. They were fixed or re-labelled, and
+feature status is now verified by execution rather than asserted by hand.
 
 Pre-1.0: APIs may change between minor versions.
 
@@ -221,24 +251,24 @@ quantum/
 │   ├── runtime/     # Execution engine, web server, renderer
 │   └── cli/         # Command-line entry point
 ├── examples/        # runnable .q examples
-├── tests/           # pytest suite (~2.4k tests)
+├── tests/           # pytest suite (~3.8k tests)
 ├── scripts/         # dev tools
 └── docs/            # VitePress documentation
 ```
 
 Adding a tag is one parser + one executor + a registry entry — see
-[CONTRIBUTING.md](CONTRIBUTING.md).
+[CONTRIBUTING.md](https://github.com/danielgregorio/quantum/blob/main/CONTRIBUTING.md).
 
 ---
 
 ## Contributing
 
-Read **[CONTRIBUTING.md](CONTRIBUTING.md)** for dev setup and how the modular
+Read **[CONTRIBUTING.md](https://github.com/danielgregorio/quantum/blob/main/CONTRIBUTING.md)** for dev setup and how the modular
 parser/executor architecture works. By participating you agree to the
-[Code of Conduct](CODE_OF_CONDUCT.md).
+[Code of Conduct](https://github.com/danielgregorio/quantum/blob/main/CODE_OF_CONDUCT.md).
 
-Found a security issue? Follow [SECURITY.md](SECURITY.md) — **do not** open a public issue.
+Found a security issue? Follow [SECURITY.md](https://github.com/danielgregorio/quantum/blob/main/SECURITY.md) — **do not** open a public issue.
 
 ## License
 
-MIT — see [LICENSE](LICENSE).
+MIT — see [LICENSE](https://github.com/danielgregorio/quantum/blob/main/LICENSE).

{quantum_framework-0.9.0 → quantum_framework-0.10.0}/README.md

@@ -1,9 +1,10 @@
 # Quantum
 
 [![CI](https://github.com/danielgregorio/quantum/actions/workflows/ci.yml/badge.svg)](https://github.com/danielgregorio/quantum/actions/workflows/ci.yml)
-[![Docker](https://github.com/danielgregorio/quantum/actions/workflows/docker.yml/badge.svg)](https://github.com/danielgregorio/quantum/actions/workflows/docker.yml)
+[![PyPI](https://img.shields.io/pypi/v/quantum-framework)](https://pypi.org/project/quantum-framework/)
+[![Python](https://img.shields.io/pypi/pyversions/quantum-framework)](https://pypi.org/project/quantum-framework/)
 [![Docs](https://img.shields.io/badge/docs-github.io-blue)](https://danielgregorio.github.io/quantum/)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://github.com/danielgregorio/quantum/blob/main/LICENSE)
 
 > **Declarative web apps in XML, with AI and RAG built into the language.
 > No build chain, no JavaScript, no frontend framework.**
@@ -81,6 +82,9 @@ coercion of the model's arguments are the runtime's job.
 </q:component>
 ```
 
+Save it as `components/orders.q`, run `quantum start`, and it is served at
+`http://localhost:8080/orders`.
+
 `q:query` refuses to run SQL with an undeclared `:param` — parameterised queries are
 enforced by the parser, not by discipline.
 
@@ -92,14 +96,22 @@ Also core: `q:set` with `session.` / `application.` / `request.` scopes, `q:if`,
 
 ## Quick start
 
-**Requirements:** Python 3.11+ and `pip`.
+**Requirements:** Python 3.12+ and `pip`.
 
 ```bash
-git clone https://github.com/danielgregorio/quantum.git
-cd quantum
-pip install -e ".[dev]"
+pip install quantum-framework
+```
 
-quantum run examples/hello.q
+Create `hello.q`:
+
+```xml
+<q:component name="HelloWorld" xmlns:q="https://quantum.lang/ns">
+  <q:return value="Hello World!" />
+</q:component>
+```
+
+```bash
+quantum run hello.q
 ```
 
 ```
@@ -107,17 +119,21 @@ quantum run examples/hello.q
 [SUCCESS] Result: Hello World!
 ```
 
+For a web app, put `.q` files in `components/` and run `quantum start`
+(`components/index.q` is served at `/`). `quantum stop` stops it.
+
 For the AI examples you also need an [Ollama](https://ollama.com) server and the RAG
 extra:
 
 ```bash
-pip install -e ".[rag]"
+pip install "quantum-framework[rag]"
 ollama pull phi3 && ollama pull nomic-embed-text
 export QUANTUM_LLM_BASE_URL=http://localhost:11434
 ```
 
-Declare datasources in `quantum.config.yaml` and `q:query` works with nothing else
-running:
+Declare datasources in `quantum.config.yaml` (next to `components/`) and `q:query` works
+with nothing else running — SQLite needs no extra; PostgreSQL and MySQL drivers come with
+`pip install "quantum-framework[db]"`:
 
 ```yaml
 datasources:
@@ -131,26 +147,41 @@ datasources:
 | Command | What it does |
 |---------|--------------|
 | `run <file.q>` | Execute a component, app, or API |
-| `start` | Start the web server |
-| `deploy <dir>` | Deploy an application |
+| `start` | Start the web server (port 8080 by default; `--port` to change) |
+| `stop` | Stop the server started by `start` |
+| `deploy [path]` · `apps` | Deploy an application, manage deployed ones |
 | `pkg` · `jobs` · `mq` · `migrate` | Packages, jobs, message queues, migrations |
 
+### From source
+
+To work on Quantum itself:
+
+```bash
+git clone https://github.com/danielgregorio/quantum.git
+cd quantum
+pip install -e ".[dev]"
+quantum run examples/hello.q
+```
+
+See [CONTRIBUTING.md](https://github.com/danielgregorio/quantum/blob/main/CONTRIBUTING.md) for the test suite and the architecture.
+
 ---
 
 ## Documentation
 
-Full docs (VitePress) at **[danielgregorio.github.io/quantum](https://danielgregorio.github.io/quantum/)** and in
-[`docs/`](docs/):
+Full docs at **[danielgregorio.github.io/quantum](https://danielgregorio.github.io/quantum/)**:
+
+- [Getting Started](https://danielgregorio.github.io/quantum/guide/getting-started) · [Installation](https://danielgregorio.github.io/quantum/guide/installation) · [Quick Start](https://danielgregorio.github.io/quantum/guide/quick-start)
+- [Components](https://danielgregorio.github.io/quantum/guide/components) · [State](https://danielgregorio.github.io/quantum/guide/state-management) · [Loops](https://danielgregorio.github.io/quantum/guide/loops) · [Conditionals](https://danielgregorio.github.io/quantum/guide/conditionals)
+- [Queries](https://danielgregorio.github.io/quantum/guide/query) · [Functions](https://danielgregorio.github.io/quantum/guide/functions) · [Data fetching](https://danielgregorio.github.io/quantum/guide/data-fetching)
 
-- [Getting Started](docs/guide/getting-started.md) · [Installation](docs/guide/installation.md) · [Quick Start](docs/guide/quick-start.md)
-- [Components](docs/guide/components.md) · [State](docs/guide/state-management.md) · [Loops](docs/guide/loops.md) · [Conditionals](docs/guide/conditionals.md)
-- [Queries](docs/guide/query.md) · [Functions](docs/guide/functions.md) · [Data fetching](docs/guide/data-fetching.md)
+Releases and their notes are on the [GitHub Releases](https://github.com/danielgregorio/quantum/releases) page.
 
 ---
 
 ## Stability
 
-Support levels are defined in **[SUPPORT_TIERS.md](SUPPORT_TIERS.md)**. Short version:
+Support levels are defined in **[SUPPORT_TIERS.md](https://github.com/danielgregorio/quantum/blob/main/SUPPORT_TIERS.md)**. Short version:
 
 | Surface | Status |
 |---------|--------|
@@ -158,13 +189,11 @@ Support levels are defined in **[SUPPORT_TIERS.md](SUPPORT_TIERS.md)**. Short ve
 | AI — `q:llm`, `q:knowledge`, `q:agent` | **Beta** — validated end-to-end against a live Ollama server |
 | `q:team` (multi-agent handoff) | Beta, less exercised |
 | Jobs, messaging, websockets, mail, file uploads, `ui:*`, terminal target | **Experimental** — they run, but no API stability promise |
-| Python scripting (`q:python`, `q:pyclass`, `q:pyimport`) | Experimental, and a full-trust escape hatch — see [SECURITY.md](SECURITY.md) |
+| Python scripting (`q:python`, `q:pyclass`, `q:pyimport`) | Experimental, and a full-trust escape hatch — see [SECURITY.md](https://github.com/danielgregorio/quantum/blob/main/SECURITY.md) |
 
 A functional audit in 2026-09 found that several of these surfaces had never been run
-end-to-end despite being documented as complete. The findings and the fixes are in
-[`FULL_AUDIT_2026-09.md`](FULL_AUDIT_2026-09.md) and
-[`AUDIT_FIX_PLAN.md`](AUDIT_FIX_PLAN.md). Feature status is now verified by execution
-rather than asserted by hand.
+end-to-end despite being documented as complete. They were fixed or re-labelled, and
+feature status is now verified by execution rather than asserted by hand.
 
 Pre-1.0: APIs may change between minor versions.
 
@@ -179,24 +208,24 @@ quantum/
 │   ├── runtime/     # Execution engine, web server, renderer
 │   └── cli/         # Command-line entry point
 ├── examples/        # runnable .q examples
-├── tests/           # pytest suite (~2.4k tests)
+├── tests/           # pytest suite (~3.8k tests)
 ├── scripts/         # dev tools
 └── docs/            # VitePress documentation
 ```
 
 Adding a tag is one parser + one executor + a registry entry — see
-[CONTRIBUTING.md](CONTRIBUTING.md).
+[CONTRIBUTING.md](https://github.com/danielgregorio/quantum/blob/main/CONTRIBUTING.md).
 
 ---
 
 ## Contributing
 
-Read **[CONTRIBUTING.md](CONTRIBUTING.md)** for dev setup and how the modular
+Read **[CONTRIBUTING.md](https://github.com/danielgregorio/quantum/blob/main/CONTRIBUTING.md)** for dev setup and how the modular
 parser/executor architecture works. By participating you agree to the
-[Code of Conduct](CODE_OF_CONDUCT.md).
+[Code of Conduct](https://github.com/danielgregorio/quantum/blob/main/CODE_OF_CONDUCT.md).
 
-Found a security issue? Follow [SECURITY.md](SECURITY.md) — **do not** open a public issue.
+Found a security issue? Follow [SECURITY.md](https://github.com/danielgregorio/quantum/blob/main/SECURITY.md) — **do not** open a public issue.
 
 ## License
 
-MIT — see [LICENSE](LICENSE).
+MIT — see [LICENSE](https://github.com/danielgregorio/quantum/blob/main/LICENSE).

{quantum_framework-0.9.0 → quantum_framework-0.10.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "quantum-framework"
-version = "0.9.0"
+version = "0.10.0"
 description = "Full-stack declarative framework for building web, desktop, and mobile applications"
 readme = "README.md"
 license = {text = "MIT"}
@@ -60,8 +60,9 @@ websocket = [
 quantum = "quantum.cli.runner:main"
 
 [project.urls]
-Homepage = "https://quantum.sargas.cloud"
-Documentation = "https://quantum.sargas.cloud"
+Homepage = "https://github.com/danielgregorio/quantum"
+Documentation = "https://danielgregorio.github.io/quantum/"
+Changelog = "https://github.com/danielgregorio/quantum/releases"
 Repository = "https://github.com/danielgregorio/quantum"
 
 [tool.setuptools.packages.find]

{quantum_framework-0.9.0 → quantum_framework-0.10.0}/quantum/cli/runner.py

@@ -175,6 +175,9 @@ class QuantumRunner:
             for route in app.routes:
                 print(f"     {route.method} {route.path}")
 
+        from quantum.core.tiers import warn_app_type
+        warn_app_type(app.app_type)
+
         if app.app_type == 'game':
             return self._build_game(app, debug)
         elif app.app_type == 'terminal':

{quantum_framework-0.9.0 → quantum_framework-0.10.0}/quantum/core/expression_stdlib.py

@@ -118,7 +118,41 @@ def _round(v: Any, digits: int = 0) -> Any:
     return int(result) if digits == 0 else result
 
 
+# -- passwords ---------------------------------------------------------------
+#
+# Authentication is Core (decision D4), and a login is "look the user up, then
+# check the password". Without these, a .q could not check a password against
+# a stored hash without q:python — so every login example just set
+# session.authenticated=true for whoever submitted the form (gap AUTH-1).
+
+def hash_password(password: Any) -> str:
+    """bcrypt hash of a password, for storing. Never store the password itself."""
+    import bcrypt
+    if password is None or password == '':
+        raise ValueError("hashPassword: the password is empty")
+    return bcrypt.hashpw(str(password).encode('utf-8'), bcrypt.gensalt()).decode('utf-8')
+
+
+def verify_password(password: Any, hashed: Any) -> bool:
+    """True when `password` matches a hash made by hashPassword.
+
+    Fail-closed: an empty password, a missing hash or a malformed hash is
+    False, never an error — so `q:if condition="verifyPassword(senha, h)"`
+    cannot be tricked into the true branch by bad data.
+    """
+    import bcrypt
+    if not password or not hashed or not isinstance(hashed, str):
+        return False
+    try:
+        return bcrypt.checkpw(str(password).encode('utf-8'), hashed.encode('utf-8'))
+    except (ValueError, TypeError):
+        return False
+
+
 STDLIB = {
+    # passwords
+    'hashPassword': hash_password,
+    'verifyPassword': verify_password,
     # dates
     'now': now,
     'dateAdd': date_add,

{quantum_framework-0.9.0 → quantum_framework-0.10.0}/quantum/core/features/data_import/src/runtime.py

@@ -241,7 +241,7 @@ class DataImportService:
                 data.append(record)
 
             return DataResult(
-                success=False,
+                success=True,     # was False: every XML import "failed", so no transform ran on it
                 data=data,
                 recordCount=len(data),
                 source=source
@@ -385,7 +385,7 @@ class DataImportService:
         """Compute derived field"""
         field = compute_op.get('field')
         expression = compute_op.get('expression')
-        comp_type = compute_op.get('type', 'string')
+        comp_type = compute_op.get('comp_type', 'string')
 
         if not field or not expression:
             return data
@@ -482,23 +482,18 @@ class DataImportService:
         if xpath == 'text()':
             return node.text
 
-        # Handle child element
-        child = node.find(xpath)
-        if child is not None:
-            if xpath.endswith('/text()'):
-                return child.text
-            elif xpath.endswith('/@'):
-                # Extract attribute from child
-                parts = xpath.rsplit('/@', 1)
-                if len(parts) == 2:
-                    child_path, attr = parts
-                    child_elem = node.find(child_path)
-                    if child_elem is not None:
-                        return child_elem.get(attr)
-            else:
-                return child.text
+        # child/@attr — ElementTree's find() does not understand the @ step.
+        if '/@' in xpath:
+            child_path, attr = xpath.rsplit('/@', 1)
+            child = node.find(child_path)
+            return child.get(attr) if child is not None else None
 
-        return None
+        # child/text() — nor text(); it raised SyntaxError on every such field.
+        if xpath.endswith('/text()'):
+            xpath = xpath[:-len('/text()')]
+
+        child = node.find(xpath)
+        return child.text if child is not None else None
 
     def _evaluate_condition(self, condition: str, record: Dict[str, Any], context: Any) -> bool:
         """Evaluate a q:data filter condition against one imported record.

{quantum_framework-0.9.0 → quantum_framework-0.10.0}/quantum/core/parsers/data/data_parser.py

@@ -125,12 +125,15 @@ class DataParser(BaseTagParser):
     def _parse_field(self, element: ET.Element) -> FieldNode:
         """Parse q:field for JSON/XML."""
         name = self.get_attr(element, 'name')
-        path = self.get_attr(element, 'path')
+        # `xpath` is the attribute every example and the reference use; only
+        # `path` was read, so `xpath="@id"` became the name "id" and `type` was
+        # dropped — attributes came back None and numbers came back as text.
+        path = self.get_attr(element, 'xpath') or self.get_attr(element, 'path')
 
         if not name:
             raise ParserError("Field requires 'name' attribute")
 
-        return FieldNode(name, path or name)
+        return FieldNode(name, path or name, self.get_attr(element, 'type') or 'string')
 
     def _parse_transform(self, element: ET.Element) -> TransformNode:
         """Parse q:transform — a container of operations.

{quantum_framework-0.9.0 → quantum_framework-0.10.0}/quantum/core/tiers.py

@@ -38,6 +38,28 @@ EXPERIMENTAL = frozenset({
 
 SUPPORTED = CORE | DIFERENCIAL
 
+# Authentication is Core too (decision D4, 2026-09-10), but it is not a tag:
+# it is the require_auth / require_role attributes of q:component plus the
+# session scope. Listed here so the surface is complete in one place.
+CORE_ATTRIBUTES = frozenset({"require_auth", "require_role"})
+
+# Application types, by tier. A q:application's type decides which engine
+# runs it, so the tier of the type is the tier of the whole app.
+#
+# LABORATORIO (decision D1/D2): the 2D game engine (qg:, including the Godot
+# codegen) stays in the repository on purpose — games press on the language
+# and surface features and bugs the core needs — but it carries no stability
+# promise and is not part of the pitch. Its tests run in the main suite, so a
+# core change that breaks a game shows up in CI.
+LAB_APP_TYPES = frozenset({"game"})
+# "html" and "api" are experimental too, measured 2026-09-10: `quantum run` on a
+# type="html" application fails at once (gap G17), and the type="api" server
+# never executes a route's body — it serves the literal text of the first
+# q:return (gap G18). The supported way to build a web app is pages in
+# components/ served by `quantum start`, which runs no q:application at all.
+EXPERIMENTAL_APP_TYPES = frozenset({"terminal", "ui", "testing", "microservices",
+                                    "html", "api"})
+
 
 def tier_of(tag_name: str) -> str:
     """'core' | 'diferencial' | 'experimental' | 'unknown'."""
@@ -77,6 +99,36 @@ def warn_if_unsupported(tag_name: str) -> None:
     )
 
 
+def app_tier_of(app_type: str) -> str:
+    """'laboratorio' | 'experimental' | 'supported' for a q:application type."""
+    if app_type in LAB_APP_TYPES:
+        return "laboratorio"
+    if app_type in EXPERIMENTAL_APP_TYPES:
+        return "experimental"
+    return "supported"
+
+
+def warn_app_type(app_type: str) -> None:
+    """One-time warning when an application of a non-supported type runs."""
+    tier = app_tier_of(app_type)
+    key = f"application:{app_type}"
+    if tier == "supported" or key in _warned:
+        return
+    _warned.add(key)
+    if tier == "laboratorio":
+        logger.warning(
+            "q:application type=%r is LABORATÓRIO — it exists to press on the "
+            "language, with no stability promise (SUPPORT_TIERS.md). It may "
+            "change or break without notice.", app_type
+        )
+    else:
+        logger.warning(
+            "q:application type=%r is EXPERIMENTAL — not covered by the "
+            "supported surface (SUPPORT_TIERS.md). It may change or break "
+            "without notice; do not rely on it in production.", app_type
+        )
+
+
 def reset_warnings() -> None:
     """For tests, and for a reloading server."""
     _warned.clear()

{quantum_framework-0.9.0 → quantum_framework-0.10.0}/quantum/runtime/executors/data/data_executor.py

@@ -119,7 +119,10 @@ class DataExecutor(BaseExecutor):
                 elif hasattr(operation, 'field'):
                     op_dict['field'] = operation.field
                     op_dict['expression'] = operation.expression
-                    op_dict['type'] = operation.comp_type
+                    # Not 'type': that key names the operation ('compute').
+                    # Writing the result type over it made every q:compute
+                    # unrecognised, and the transformation was skipped.
+                    op_dict['comp_type'] = operation.comp_type
 
                 params['transforms'].append(op_dict)