test: ledger the bucket echo enumeration's producer calls and turn the runtime dry-run pin

The client envelope-caller census gains a NOT_SDK row for the two
analytics.query sites in service-analytics' new bucket echo enumeration
pin (section 2: 9 to 11 service sites; section 3: 9 to 11 not-SDK), and
the file is declared by name in @objectstack/client#test's cross-package
test inputs, beside the date-bucket echo pin.

runtime's authored-cube pin asserted 200 and date_trunc from
POST /analytics/sql on a host that wires no dateBucketSql hook. That dry
run now answers the declared refusal, NOT_IMPLEMENTED / 501, whose kept
message names the bucket (the declared month, the stated year) and the
cause.

Claude-Session: https://claude.ai/code/session_01DiCSbmJrkzNhuEAier4VoJ
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/client/src/envelope-caller-census.test.ts

@@ -493,6 +493,12 @@ const LEDGER: readonly LedgerRow[] = [
         method: 'analytics.query', receiver: 'service', count: 1, verdict: 'NOT_SDK',
         why: 'the real AnalyticsService that AnalyticsServicePlugin registers over a live engine, called directly (no HTTP, no dispatcher envelope) to read the ObjectQL face\'s rows and the echoed `sql` it runs against them',
     },
+    // ── [#21647] the bucket echo's driver x timezone x granularity enumeration: producer reads only ──
+    {
+        file: 'packages/services/service-analytics/src/__tests__/objectql-echo-bucket-enumeration.test.ts',
+        method: 'analytics.query', receiver: 'service', count: 2, verdict: 'NOT_SDK',
+        why: 'the real AnalyticsService that AnalyticsServicePlugin registers over an ObjectQL engine with the driver\'s data doors spied, called directly (no HTTP, no dispatcher envelope) to read whether the ObjectQL face\'s answer carries an echoed `sql`, and its rows',
+    },
     {
         file: 'packages/client/src/analytics-automation-json-erasure.test.ts',
         method: 'analytics.meta', receiver: 'sdk', count: 2, verdict: 'PAYLOAD_DEPENDENT',
@@ -699,11 +705,15 @@ describe('#13079 §2 — positive controls on the matcher itself', () => {
         // the real AnalyticsService that `AnalyticsServicePlugin` registers
         // over a live engine, to read the ObjectQL face's rows beside its
         // echoed `sql`. Its receiver is that service, not the client.
-        expect(service.length, literalNote()).toBe(9);
+        // [#21647] A fifth, two sites: the bucket echo's enumeration pin calls
+        // the same plugin-registered AnalyticsService, over an engine with the
+        // driver's data doors spied, to read whether the answer carries `sql`.
+        expect(service.length, literalNote()).toBe(11);
         expect([...new Set(service.map((s) => s.file))].sort()).toEqual([
             'packages/client/src/analytics-automation-json-erasure.test.ts',
             'packages/drivers/driver-memory/src/memory-exists-non-boolean-refusal.test.ts',
             'packages/rest/src/analytics-nested-relation-filter.test.ts',
+            'packages/services/service-analytics/src/__tests__/objectql-echo-bucket-enumeration.test.ts',
             'packages/services/service-analytics/src/__tests__/objectql-echo-date-bucket.test.ts',
         ]);
         expect(service.every((s) => s.method === 'analytics.query')).toBe(true);
@@ -751,11 +761,12 @@ describe('#13079 §3 — every call site is classified', () => {
         expect(production, literalNote()).toEqual([]);
     });
 
-    it('records the split: 18 payload pins, 10 result-insensitive, 9 not-SDK', () => {
+    it('records the split: 18 payload pins, 10 result-insensitive, 11 not-SDK', () => {
         expect(verdictTotal('PAYLOAD_DEPENDENT')).toBe(18);
         expect(verdictTotal('RESULT_INSENSITIVE')).toBe(10);
         // [#21441] 8 -> 9: the date-bucket echo pin's producer call (§2).
-        expect(verdictTotal('NOT_SDK')).toBe(9);
+        // [#21647] 9 -> 11: the bucket echo enumeration's two producer calls (§2).
+        expect(verdictTotal('NOT_SDK')).toBe(11);
         // The three above are LEDGER sums and cannot move on a census reading;
         // this one is census-derived, so it carries the note. [#13874]
         expect(sdkSites.length, literalNote()).toBe(28);

packages/runtime/src/analytics-authored-cube-format-granularity.test.ts

@@ -144,7 +144,19 @@ describe('an authored time dimension\'s single declared granularity is its defau
         expect(res.body.data.rows).toEqual([{ placed_at: '2026-07', count: 2 }]);
     });
 
-    it('POST /analytics/sql dry-runs the bucketed statement, and a stated granularity still wins', async () => {
+    // [#21647] This case asserted 200 and `date_trunc('month'` / `date_trunc('year'`:
+    // the representative bucket the SQL echo printed for a host with no
+    // `dateBucketSql` hook, which no driver groups by. This host composes the
+    // service directly, with no hook and no driver behind it, so the dry run now
+    // answers the service's declared refusal (`NOT_IMPLEMENTED` / 501,
+    // `refusal: true` at throw time). This exit reads that declaration to keep
+    // the producer's message instead of withholding a 5xx as a fault, so the
+    // message reaching the wire IS the declaration's effect: it names the bucket
+    // it refused and the cause, the declared default for the first request and
+    // the stated granularity for the second. Where a hook answers, the
+    // service-level pin (`service-analytics` `cube-authored-format-granularity.test.ts`)
+    // asserts the driver's expression.
+    it('POST /analytics/sql dry-runs the bucket at the declared granularity, and a stated granularity still wins (no dateBucketSql hook: the declared refusal)', async () => {
         const declared = await post(analytics().service, 'sql', { cube: 'orders', measures: ['count'], dimensions: ['placed_at'] });
         const stated = await post(analytics().service, 'sql', {
             cube: 'orders',
@@ -153,9 +165,12 @@ describe('an authored time dimension\'s single declared granularity is its defau
             timeDimensions: [{ dimension: 'placed_at', granularity: 'year' }],
         });
 
-        expect(declared.statusCode).toBe(200);
-        expect(declared.body.data.sql).toMatch(/date_trunc\('month'/i);
-        expect(stated.statusCode).toBe(200);
-        expect(stated.body.data.sql).toMatch(/date_trunc\('year'/i);
+        for (const [res, granularity] of [[declared, 'month'], [stated, 'year']] as const) {
+            expect(res.statusCode, granularity).toBe(501);
+            expect(res.body.success, granularity).toBe(false);
+            expect(res.body.error.code, granularity).toBe('NOT_IMPLEMENTED');
+            expect(res.body.error.message, granularity).toContain(`"${granularity}" bucket of "placed_at"`);
+            expect(res.body.error.message, granularity).toContain('dateBucketSql');
+        }
     });
 });

scripts/cross-package-test-inputs.mjs

@@ -765,6 +765,12 @@ export const CROSS_PACKAGE_TEST_INPUTS = {
       // `service`). A call added to or removed from that file moves the census
       // verdict, so a change to it has to re-run this suite.
       'packages/services/service-analytics/src/__tests__/objectql-echo-date-bucket.test.ts',
+      // [#21647] Declared by name for the same reason: the census LEDGER
+      // carries a NOT_SDK row for service-analytics' bucket echo enumeration
+      // pin, which calls `analytics.query(` twice on the real AnalyticsService
+      // (receiver `service`). A call added to or removed from that file moves
+      // the census verdict, so a change to it has to re-run this suite.
+      'packages/services/service-analytics/src/__tests__/objectql-echo-bucket-enumeration.test.ts',
     ],
     heldBy: {
       // `scripts/**` is rostered TODAY through the census's own

turbo.json

@@ -262,7 +262,8 @@
         "$TURBO_ROOT$/scripts/**",
         "$TURBO_ROOT$/packages/rest/src/analytics-nested-relation-filter.test.ts",
         "$TURBO_ROOT$/packages/drivers/driver-memory/src/memory-exists-non-boolean-refusal.test.ts",
-        "$TURBO_ROOT$/packages/services/service-analytics/src/__tests__/objectql-echo-date-bucket.test.ts"
+        "$TURBO_ROOT$/packages/services/service-analytics/src/__tests__/objectql-echo-date-bucket.test.ts",
+        "$TURBO_ROOT$/packages/services/service-analytics/src/__tests__/objectql-echo-bucket-enumeration.test.ts"
       ]
     },
     "@objectstack/lint#test": {