Conformance

Use this checklist when claiming MeshQL protocol compatibility.

Reference implementation: github.com/meshql/meshql @meshql/* packages.

Level 1 — Core

• GET /:entity/:id with X-Mesh-Query + X-Mesh-Format: json returns 200 JSON
• Missing X-Mesh-Query returns 400 TransportError
• Unknown field returns 400 ValidationError
• Nested relation selection returns nested JSON (shaper or equivalent)
• Multi-level nesting (a.b.c) returns correct nesting (not flattened away)
• QL format accepted when X-Mesh-Format: ql (selection-only; explicit format required)
• POST / accepts { "query", "format" } body

Pass fixtures: fixtures/queries, fixtures/responses.

Level 2 — Collections

• GET /:entity returns { items, pageInfo }
• $page.first respects the maximum (≤ 200)
• $where boolean trees and supported operators are applied or cleanly rejected
• $orderBy appends a deterministic id tiebreaker
• $page.after performs scoped keyset pagination
• $groupBy, $aggregate, $having, and $distinct are applied or cleanly rejected
• Read controls live in the signed query payload, not the URL querystring

Level 3 — Integrity

• POST /auth returns token material
• Valid HMAC on X-Mesh-Query accepted
• Tampered base64 query rejected
• Logout revokes token

Level 4 — Uploads

• Multipart upload routes accept file part
• contentHash mismatch rejected when signing enabled

Optional profile — Computed fields

• Computed names are selectable under $select
• Physical dependencies are fetched but omitted unless selected
• Cross-entity join.field dependencies add the required join
• Computed-to-computed and unknown dependencies are rejected
• Computed fields denied by access rules do not expose their dependencies
• Computed fields in $where are rejected

Reporting

Publish which level you claim and the tested @meshql/* release. Linking fixture diffs in CI is encouraged.