Package-level declarations

Resolves the tenant, owner and space of a request. Values read from the request itself (path variables, headers) are declared; an aggregate's static tenant is a server fact and authenticated. Override the *Provenance functions when a trusted component (an authenticating gateway that owns these headers, say) vouches for them.

Handles an aggregation query body against the snapshot or event stream QueryGateway of an aggregate.

Creates the aggregation handler of the route identified by handlerKey, for snapshot and event stream alike.

The HTTP adapter's side of a query: what happens to the request before the gateway and to the response after it. The HTTP budget itself (sizes, filter nodes and values, expensive operators) belongs to the gateway's entry policy, which admission checks; of binds this guard to it, so the rows the guard lets through, the list default it applies and the descriptor limits all follow the budget admission enforces.

Reads a query request body strictly. With requireRootOperator, a body whose root object names neither op nor the legacy operator is rejected instead of being read as a legacy condition, whose operator defaults to ALL.

Base factory for aggregate query routes: resolves the aggregate's gateway once per route and hands both to handlerFunction.

The HTTP adapter's scope provider: the caller scope of a query route, each part tagged with where it came from. Only an authenticated part is a security boundary; see me.ahoo.wow.query.QueryEntryPolicy.requireAuthenticatedScope.